From 23f1eede91f2ca383fbad1057f8f28b94136df48 Mon Sep 17 00:00:00 2001 From: Anton Gilgur Date: Mon, 8 Jan 2024 22:08:43 -0500 Subject: [PATCH] style: reorder dep sections - put Go, then NPM, then GH Actions - i.e. the most important prod impacting deps, then build deps Signed-off-by: Anton Gilgur --- .github/dependabot.yml | 24 +++++++++++++----------- 1 file changed, 13 insertions(+), 11 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 311de638153f..13482f2822f1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,6 @@ version: 2 updates: + # prod dependencies - package-ecosystem: "gomod" directory: "/" schedule: @@ -12,27 +13,28 @@ updates: # ignore all non-security updates: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit open-pull-requests-limit: 0 - - package-ecosystem: "github-actions" - directory: "/" + - package-ecosystem: "npm" + directory: "/ui" schedule: interval: "weekly" day: "saturday" ignore: - # temporarily ignore until https://github.com/actions/download-artifact/issues/249 is resolved - - dependency-name: "actions/download-artifact" - - dependency-name: "actions/upload-artifact" + - dependency-name: raw-loader + - dependency-name: style-loader + - dependency-name: react-router-dom + - dependency-name: "@types/react-router-dom" # ignore all non-security updates: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit open-pull-requests-limit: 0 - - package-ecosystem: "npm" - directory: "/ui" + # build / CI dependencies + - package-ecosystem: "github-actions" + directory: "/" schedule: interval: "weekly" day: "saturday" ignore: - - dependency-name: raw-loader - - dependency-name: style-loader - - dependency-name: react-router-dom - - dependency-name: "@types/react-router-dom" + # temporarily ignore until https://github.com/actions/download-artifact/issues/249 is resolved + - dependency-name: "actions/download-artifact" + - dependency-name: "actions/upload-artifact" # ignore all non-security updates: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#open-pull-requests-limit open-pull-requests-limit: 0