Skip to content

Commit

Permalink
Configure dependabot ignores by file
Browse files Browse the repository at this point in the history
This both gives us better persistent tracking of updates that we
intentionally aren't taking and also gives us a workaround for a current
bug where the "@dependabot ignore" directive doesn't work for
"@"-prefixed packages.

Once merged, I'll go through and issue unignore directives for each of
these, so that they don't override the ignore directives in the config
file.
  • Loading branch information
ebroder committed Aug 29, 2023
1 parent 0d7188f commit 2eb0442
Showing 1 changed file with 20 additions and 0 deletions.
20 changes: 20 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,26 @@ updates:
all:
patterns:
- "*"
ignore:
# All of these dependencies require Node v16 or greater
- dependency-name: "@types/node"
versions: [">=14"]
- dependency-name: "@typescript-eslint/eslint-plugin"
versions: [">=6"]
- dependency-name: "@typescript-eslint/parser"
versions: [">=6"]
- dependency-name: "@typescript-eslint/utils"
versions: [">=6"]
- dependency-name: "discord.js"
versions: [">=13"]
- dependency-name: "glob"
versions: [">=9"]
- dependency-name: "puppeteer"
# marked has had significant API revisions that we need to take manually
- dependency-name: "marked"
versions: [">=5"]
- dependency-name: "@types/marked"
versions: [">=5"]
- package-ecosystem: "github-actions"
directory: "/"
schedule:
Expand Down

0 comments on commit 2eb0442

Please sign in to comment.