trails/.github/dependabot.yml
Ullrich Schäfer debaf769d5
Tighten dependabot ignore rules
- Skip major bumps on @types/jest + @types/node so the types stay
  aligned with the runtime (jest 29 with @types/jest 29, not 30).
- Skip react-native itself since it's pinned by the Expo SDK and
  should only move when we bump Expo. Community react-native-*
  libraries stay on the normal weekly cadence.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-19 10:58:05 +02:00

42 lines
1.2 KiB
YAML

version: 2
updates:
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
groups:
production:
update-types:
- "minor"
- "patch"
development:
dependency-type: "development"
open-pull-requests-limit: 10
ignore:
# Keep @types/* aligned with the runtime major. Mismatched type
# packages (e.g. @types/jest 30 while jest is still 29) break
# typecheck without buying us anything.
- dependency-name: "@types/jest"
update-types: ["version-update:semver-major"]
- dependency-name: "@types/node"
update-types: ["version-update:semver-major"]
# react-native is pinned by the Expo SDK — upgrade it via an Expo
# SDK bump, not on its own. Community react-native-* libraries are
# intentionally NOT ignored here; they can be bumped independently.
- dependency-name: "react-native"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
open-pull-requests-limit: 5
- package-ecosystem: "docker"
directory: "/apps/journal"
schedule:
interval: "monthly"
- package-ecosystem: "docker"
directory: "/apps/planner"
schedule:
interval: "monthly"