Adds `.github/dependabot.yml` so GitHub automatically opens PRs for outdated dependencies on a weekly cadence. Covers both the primary package ecosystem and GitHub Actions workflows. The PR limit is set to 5 to avoid noise. Feel free to adjust or drop either ecosystem. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Added automated weekly checks for updates to GitHub Actions and npm packages. * Limited open npm update requests to five at a time. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
12 lines
219 B
YAML
12 lines
219 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 5
|