From 6ac3497dc8815e4951780f1887e27b6bc715c083 Mon Sep 17 00:00:00 2001 From: Justin Xiao Date: Fri, 6 Oct 2023 11:24:09 -0700 Subject: [PATCH] fix: dependabot ci failure issue --- .github/dependabot.yml | 19 +++++++++++++++++++ .github/workflows/auto-label.yaml | 1 + 2 files changed, 20 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..87530ad4 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,19 @@ +version: 2 +updates: + # Maintain dependencies for GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + commit-message: + prefix: "[DEPENDA-BOT] " + + # Maintain dependencies for npm + # only update dependencies that are very urgent + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + commit-message: + prefix: "[DEPENDA-BOT] " + open-pull-requests-limit: 0 diff --git a/.github/workflows/auto-label.yaml b/.github/workflows/auto-label.yaml index d06eef59..bb51ecc0 100644 --- a/.github/workflows/auto-label.yaml +++ b/.github/workflows/auto-label.yaml @@ -23,6 +23,7 @@ jobs: { keyword: 'refactor', label: 'refactor' }, { keyword: 'fix', label: 'bug' }, { keyword: '[RENOVATE-BOT]', label: 'dependency upgrade' }, + { keyword: '[DEPENDA-BOT]', label: 'dependency alerts' }, ]; // Collect all labels that should be added according to the title