From 829d002d600bd794a3c6814fed34a6112b382600 Mon Sep 17 00:00:00 2001 From: S4NKALP Date: Tue, 22 Apr 2025 05:10:54 +0545 Subject: [PATCH] refactor(dependabot): changes interval --- .github/dependabot.yml | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b77c20f..5d4b48e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,9 +3,21 @@ updates: - package-ecosystem: "pip" # For Python projects using pip directory: "/" # Root directory of your repository schedule: - interval: "daily" # Check for updates daily + interval: "weekly" # Check for updates weekly commit-message: prefix: "fix(deps)" # Custom prefix for Dependabot PRs open-pull-requests-limit: 5 # Limit the number of open PRs at once reviewers: - "S4NKALP" # Add GitHub username(s) to review PRs + # Add version constraints to be more conservative + versioning-strategy: "lockfile-only" + # Limit updates to patches and minor versions, not major + allow: + - dependency-type: "direct" + update-type: "semver:patch" + - dependency-type: "direct" + update-type: "semver:minor" + # Ignore specific problematic packages if needed + # ignore: + # - dependency-name: "some-package" + # versions: ["1.x.x"]