Merge pull request #3709 from plotly/fix/dependabot-too-much

Improved dependabot config

Author: T4rk1n

.flake8

@@ -1,6 +1,7 @@
 [flake8]
 ignore = C901, E203, E266, E501, E731, W503
 select = B,C,E,F,W,T4
+exclude = node_modules,metadata_test.py
 per-file-ignores =
     tests/*: E722, F811
     dash/html/I.py: E742

.github/dependabot.yml

@@ -2,69 +2,153 @@ version: 2
 updates:
   # Root package dependencies
   - package-ecosystem: "npm"
-    directory: "/"
+    directories:
+      - "/"
+      - "!/@plotly/*"
     schedule:
       interval: "weekly"
       day: "monday"
+    cooldown:
+      default-days: 14
     groups:
       npm-dependencies:
+        applies-to: version-updates
+        patterns:
+          - "*"
+      npm-dependencies-security:
+        applies-to: security-updates
         patterns:
           - "*"
-    ignore:
-      # Ignore @plotly packages
-      - dependency-name: "@plotly/*"
 
   # Dash renderer
   - package-ecosystem: "npm"
     directory: "/dash/dash-renderer"
     schedule:
       interval: "weekly"
       day: "monday"
+    cooldown:
+      default-days: 14
     groups:
       npm-dependencies:
+        applies-to: version-updates
         patterns:
           - "*"
+      npm-dependencies-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+    allow:
+      - dependency-name: "@types/*"
+      - dependency-name: "@babel/*"
+      - dependency-name: "babel-loader"
+      - dependency-name: "ts-loader"
+      - dependency-name: "cookie"
+      - dependency-name: "eslint*"
+      - dependency-name: "prettier"
+      - dependency-name: "webpack*"
+      - dependency-name: "typescript"
 
   # Components - dash-core-components
   - package-ecosystem: "npm"
     directory: "/components/dash-core-components"
     schedule:
       interval: "weekly"
       day: "monday"
+    cooldown:
+      default-days: 14
     groups:
       npm-dependencies:
+        applies-to: version-updates
+        patterns:
+          - "*"
+      npm-dependencies-security:
+        applies-to: security-updates
         patterns:
           - "*"
+    # Only auto-update these packages for version updates
+    allow:
+      - dependency-name: "date-fns"
+      - dependency-name: "file-saver"
+      - dependency-name: "ramda"
+      - dependency-name: "react-window"
+      - dependency-name: "@radix-ui/*"
+      - dependency-name: "@types/*"
+      - dependency-name: "@babel/*"
+      - dependency-name: "babel-loader"
+      - dependency-name: "eslint*"
+      - dependency-name: "prettier"
+      - dependency-name: "webpack*"
+      - dependency-name: "typescript"
 
   # Components - dash-html-components
   - package-ecosystem: "npm"
     directory: "/components/dash-html-components"
     schedule:
       interval: "weekly"
       day: "monday"
+    cooldown:
+      default-days: 14
     groups:
       npm-dependencies:
+        applies-to: version-updates
         patterns:
           - "*"
+      npm-dependencies-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+    allow:
+      - dependency-name: "@types/*"
+      - dependency-name: "@babel/*"
+      - dependency-name: "babel-loader"
+      - dependency-name: "eslint*"
+      - dependency-name: "webpack*"
+      - dependency-name: "typescript"
 
   # Components - dash-table
   - package-ecosystem: "npm"
     directory: "/components/dash-table"
     schedule:
       interval: "weekly"
       day: "monday"
+    cooldown:
+      default-days: 14
     groups:
       npm-dependencies:
+        applies-to: version-updates
+        patterns:
+          - "*"
+      npm-dependencies-security:
+        applies-to: security-updates
         patterns:
           - "*"
+    allow:
+      - dependency-name: "@types/*"
+      - dependency-name: "@babel/*"
+      - dependency-name: "babel-loader"
+      - dependency-name: "ts-loader"
+      - dependency-name: "css-loader"
+      - dependency-name: "less"
+      - dependency-name: "less-loader"
+      - dependency-name: "eslint*"
+      - dependency-name: "prettier"
+      - dependency-name: "webpack*"
+      - dependency-name: "typescript"
 
   # Python dependencies
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "monday"
+    cooldown:
+      default-days: 14
     groups:
       pip-dependencies:
+        applies-to: version-updates
+        patterns:
+          - "*"
+      pip-dependencies-security:
+        applies-to: security-updates
         patterns:
           - "*"

.pylintrc

@@ -17,7 +17,8 @@ ignore-patterns=
 # The regex matches against paths.
 ignore-paths=^dash/dcc/.*$,
              ^dash/html/.*$,
-             ^dash/dash_table/.*$
+             ^dash/dash_table/.*$,
+             ^.*/node_modules/.*$
 
 # Python code to execute, usually for sys.path manipulation such as
 # pygtk.require().