Merge pull request #3161 from overleaf/jpa-dependabot-config

[misc] add the dependabot config of the buildscripts

GitOrigin-RevId: 0404b908b9fc7dffb401c2cba989b7d6f594d97c
This commit is contained in:
Simon Detheridge 2020-09-04 12:49:10 +01:00 committed by Copybot
parent c3e1fbbbb0
commit 69d4a83bd4

17
services/web/.github/dependabot.yml vendored Normal file
View file

@ -0,0 +1,17 @@
version: 2
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
pull-request-branch-name:
# Separate sections of the branch name with a hyphen
# Docker images use the branch name and do not support slashes in tags
# https://github.com/overleaf/google-ops/issues/822
# https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#pull-request-branch-nameseparator
separator: "-"
# Block informal upgrades -- security upgrades use a separate queue.
# https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#open-pull-requests-limit
open-pull-requests-limit: 0