diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a6a4ae08..daf1f01c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -21,3 +21,20 @@ updates: - '*' # Allow to create PR both of security and normal updates. open-pull-requests-limit: 1 + - package-ecosystem: 'npm' + directory: '/' + schedule: + interval: 'monthly' + groups: + # PR: "Security update [package] from [old] to [new]" + # This PR should be merged in hurry + security-updates: + applies-to: security-updates + patterns: + - '*' + monthly-updates: + applies-to: version-updates + patterns: + - '*' + # Allow to create PR both of security and normal updates. + open-pull-requests-limit: 1