chore: add dependabot.yml with ignored type packages
Adds a dependabot.yml configuration that: - Ignores @types/react and @types/node (need to match supported versions) - Ignores packages with licensing issues (@elastic/elasticsearch, event-source-polyfill) - Disables version update PRs (we use Renovate for that) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> Signed-off-by: Fredrik Adelöw <freben@gmail.com>
This commit is contained in:
@@ -0,0 +1,15 @@
|
||||
version: 2
|
||||
updates:
|
||||
- package-ecosystem: 'npm'
|
||||
directory: '/'
|
||||
schedule:
|
||||
interval: 'weekly'
|
||||
ignore:
|
||||
# These need to stay pinned to match the React/Node versions we support
|
||||
- dependency-name: '@types/react'
|
||||
- dependency-name: '@types/node'
|
||||
# Ignored due to licensing issues. See #10992
|
||||
- dependency-name: '@elastic/elasticsearch'
|
||||
- dependency-name: 'event-source-polyfill'
|
||||
# Disable version updates since we use Renovate for that
|
||||
open-pull-requests-limit: 0
|
||||
Reference in New Issue
Block a user