From f0abe4072bfa768eab75b1a8aa0c6f8e07e009db Mon Sep 17 00:00:00 2001 From: Vanessa Yuen Date: Mon, 15 Apr 2019 13:46:36 -0400 Subject: [PATCH] whitelist a bunch of dependencies (mostly only used in tests) to allow dependabot to auto-merge these updates --- .dependabot/config.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .dependabot/config.yml diff --git a/.dependabot/config.yml b/.dependabot/config.yml new file mode 100644 index 0000000000..470b8fd6ca --- /dev/null +++ b/.dependabot/config.yml @@ -0,0 +1,31 @@ +version: 1 +update_configs: + # Keep package.json (& lockfiles) up to date as soon as + # new versions are published to the npm registry + - package_manager: "javascript" + directory: "/" + update_schedule: "live" + + # Automerge all whitelisted dependency updates (after CI passes) + automerged_updates: + - match: + dependency_name: "*mocha*" + update_type: "all" + - match: + dependency_name: "chai*" + update_type: "all" + - match: + dependency_name: "enzyme*" + update_type: "all" + - match: + dependency_name: "eslint*" + update_type: "all" + - match: + dependency_name: "sinon" + update_type: "all" + - match: + dependency_name: "semver" + update_type: "all" + - match: + dependency_name: "test-until" + update_type: "all"