Skip to content

Commit 41376b1

Browse files
authored
revert: restore npm dependabot config to dependabot.yml (#84)
revert: restore .github/dependabot.yml to previous version Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
1 parent 195d3f1 commit 41376b1

1 file changed

Lines changed: 23 additions & 1 deletion

File tree

.github/dependabot.yml

Lines changed: 23 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,4 +27,26 @@ updates:
2727
actions-security:
2828
applies-to: security-updates
2929
patterns:
30-
- "*"
30+
- "*"
31+
32+
# NPM dependencies (Hugo site and tooling)
33+
- package-ecosystem: "npm"
34+
directory: "/"
35+
schedule:
36+
# Monthly scheduled updates to balance freshness with maintenance effort; security updates can still be raised separately
37+
interval: "monthly"
38+
commit-message:
39+
prefix: "chore(deps)"
40+
versioning-strategy: increase-if-necessary
41+
reviewers:
42+
- "github/cse-intelligence-engine-squad"
43+
# Group version and security updates separately.
44+
groups:
45+
npm-version:
46+
applies-to: version-updates
47+
patterns:
48+
- "*"
49+
npm-security:
50+
applies-to: security-updates
51+
patterns:
52+
- "*"

0 commit comments

Comments
 (0)