conformance/.github/dependabot.yml at 7f6eb148354f42f2d0d354024883f053666806dc · modelcontextprotocol/conformance · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
version: 2

# Security updates always come through regardless of these settings.
# Scheduled (non-security) updates are limited to minor/patch only —
# major bumps of devDeps like eslint/typescript are manual decisions.

updates:
  - package-ecosystem: npm
    directory: /
    schedule:
      interval: monthly
    groups:
      all-dependencies:
        patterns:
          - '*'
    ignore:
      - dependency-name: '*'
        update-types: ['version-update:semver-major']

  - package-ecosystem: npm
    directory: /examples/servers/typescript
    schedule:
      interval: monthly
    groups:
      all-dependencies:
        patterns:
          - '*'
    ignore:
      - dependency-name: '*'
        update-types: ['version-update:semver-major']

  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: monthly
    groups:
      all-actions:
        patterns:
          - '*'
    ignore:
      - dependency-name: '*'
        update-types: ['version-update:semver-major']