Merge pull request #321 from UKGovernmentBEIS/PC-1636-add-an-automate…

…d-package-auditor PC-1636: Add an automated package auditor
UKGovernmentBEIS · Jan 10, 2025 · 8e99994 · 8e99994
2 parents fc3b37f + 6d47726
commit 8e99994
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,24 @@
+version: 2
+updates:
+  - package-ecosystem: "nuget"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    # we may not be able to respond to pull requests immediately
+    # prioritise showing them all
+    open-pull-requests-limit: 0
+    # group together minor & patch updates. major ones get a PR per change
+    groups:
+      non-major:
+        update-types:
+          - "minor"
+          - "patch"
+
+  - package-ecosystem: "npm"
+    directory: "SeaPublicWebsite"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 0
+    # group all npm updates
+    groups:
+      npm: