Restrict Dependabot to update only the lockfiles

This enables us to specify versions in the Gemfile and package.json and
Dependabot won't suggest updates we excluded that way.
This commit is contained in:
Maikel Linke
2022-01-17 11:42:14 +11:00
parent 11578a8852
commit bbafe9ff94

View File

@@ -6,8 +6,10 @@ updates:
schedule:
interval: "daily"
open-pull-requests-limit: 10
versioning-strategy: lockfile-only
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "daily"
versioning-strategy: lockfile-only