From e32f485b38736524b27135fea29d483eee67912f Mon Sep 17 00:00:00 2001 From: Kentaro Hayashi Date: Fri, 4 Sep 2026 14:06:41 +0900 Subject: [PATCH] ci: allow npm scheduled updates Signed-off-by: Kentaro Hayashi --- .github/dependabot.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a6a4ae08..daf1f01c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -21,3 +21,20 @@ updates: - '*' # Allow to create PR both of security and normal updates. open-pull-requests-limit: 1 + - package-ecosystem: 'npm' + directory: '/' + schedule: + interval: 'monthly' + groups: + # PR: "Security update [package] from [old] to [new]" + # This PR should be merged in hurry + security-updates: + applies-to: security-updates + patterns: + - '*' + monthly-updates: + applies-to: version-updates + patterns: + - '*' + # Allow to create PR both of security and normal updates. + open-pull-requests-limit: 1