Commit Graph

18 Commits

Author SHA1 Message Date
Tim Donohue
9eadcea48a Update dependabot.yml. Remove security related settings as those automatically occur anyways. 2025-09-08 14:56:26 -05:00
Tim Donohue
9f8fd506f0 Move zone.js and typescript rules into "ignore" settings and ignore all major/minor versions 2025-07-31 16:09:42 -05:00
Tim Donohue
2ee68323d5 Update dependabot to run monthly 2025-07-30 11:53:04 -05:00
Tim Donohue
813f9ba23f Merge pull request #4483 from alanorth/dependabot-typescript
.github/dependabot.yml: adjust rules for typescript
2025-07-29 09:28:54 -05:00
Alan Orth
4cd8544a43 .github/dependabot.yml: group @ngtools/webpack with Angular
@ngtools/webpack is provided by the Angular team and follows the
same versioning so we should group it with Angular in dependabot.
2025-07-28 21:53:09 -07:00
Alan Orth
460cef44c1 .github/dependabot.yml: adjust rules for typescript
Our package.json uses the "~" specifier to pin typescript to patch
versions so dependabot should not try to update minor versions here.
2025-07-28 21:48:20 -07:00
Alan Orth
c838b4298c .github/dependabot.yml: adjust rules for zone.js
As @angular/core uses the "~" specifier to pin zone.js to a patch
version,dependabot should not try to update minor versions here.

See: https://github.com/angular/angular/blob/18.2.x/packages/core/package.json
2025-06-04 09:48:31 +03:00
Tim Donohue
ee95cbfaef Add dependabot configuration for dspace-9_x. Set a specific time for each to run so that they run together as much as possible. 2025-05-28 11:44:34 -05:00
Tim Donohue
497f4fd8d4 Ensure "axe-*" is a member of the "testing" group, as it's only used for e2e tests 2024-10-25 12:57:26 -05:00
Tim Donohue
ea8f24d410 Fix bug where all security-updates need unique IDs 2024-10-23 11:33:28 -05:00
Tim Donohue
92ee89e8e5 Fix bug in dependabot.yml "security-updates" settings
"security-updates" configs can only be in sections where there is no "target-branch". This is because they only apply to the primary branch.
2024-10-23 11:31:16 -05:00
Tim Donohue
b7c4c737c1 Update dependabot.yml 2024-10-22 16:29:48 -05:00
Tim Donohue
ce1dc46857 Update dependabot.yml
Remove @types grouping because Dependabot already groups types with related dependencies.
2024-10-21 14:02:56 -05:00
Tim Donohue
f750259c50 Update dependabot.yml with new groups for eslint, testing, postcss, sass, webpack 2024-10-18 15:09:55 -05:00
Tim Donohue
77c245ae53 Ensure @typescript-eslint dependency updates are grouped by dependabot 2024-10-15 16:44:50 -05:00
Tim Donohue
2cf3682473 Enable dependabot on 7.x and 8.x maintenance branches. 2024-10-14 15:52:50 -05:00
Tim Donohue
0d36bcec2e Fix yaml alignment 2024-10-14 12:22:53 -05:00
Tim Donohue
f9fa586060 Create dependabot.yml
Add configs for version dependency updates
2024-10-14 12:08:33 -05:00