We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 195d3f1 commit 41376b1Copy full SHA for 41376b1
1 file changed
.github/dependabot.yml
@@ -27,4 +27,26 @@ updates:
27
actions-security:
28
applies-to: security-updates
29
patterns:
30
- - "*"
+ - "*"
31
+
32
+ # NPM dependencies (Hugo site and tooling)
33
+ - package-ecosystem: "npm"
34
+ directory: "/"
35
+ schedule:
36
+ # Monthly scheduled updates to balance freshness with maintenance effort; security updates can still be raised separately
37
+ interval: "monthly"
38
+ commit-message:
39
+ prefix: "chore(deps)"
40
+ versioning-strategy: increase-if-necessary
41
+ reviewers:
42
+ - "github/cse-intelligence-engine-squad"
43
+ # Group version and security updates separately.
44
+ groups:
45
+ npm-version:
46
+ applies-to: version-updates
47
+ patterns:
48
49
+ npm-security:
50
+ applies-to: security-updates
51
52
0 commit comments