mirror of
https://github.com/snapotter-hq/SnapOtter.git
synced 2026-08-03 07:46:42 +02:00
SnapOtter
64a8ab6944
Dependabot was creating orphaned branches for risky major bumps (Node 22->25, CUDA 12->13, Pillow 11->12, onnxruntime 1.20->1.25) without opening PRs. These require manual evaluation, not auto-update. Aligns pip and docker config with the npm ecosystem which already ignores major bumps.
59 lines
1.3 KiB
YAML
59 lines
1.3 KiB
YAML
version: 2
|
|
|
|
updates:
|
|
# npm/pnpm dependencies (root lockfile covers entire monorepo)
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 10
|
|
groups:
|
|
production-deps:
|
|
dependency-type: "production"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
dev-deps:
|
|
dependency-type: "development"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
ignore:
|
|
- dependency-name: "*"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
# Python dependencies (AI sidecar)
|
|
- package-ecosystem: "pip"
|
|
directory: "/packages/ai/python"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 5
|
|
ignore:
|
|
- dependency-name: "*"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
# Docker base images
|
|
- package-ecosystem: "docker"
|
|
directory: "/docker"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 3
|
|
ignore:
|
|
- dependency-name: "*"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
# GitHub Actions
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 5
|
|
groups:
|
|
actions:
|
|
patterns:
|
|
- "*"
|