dependabot.yml

version: 2
updates:
  # Set update schedule for npm packages.
  # FIXME: Update our npm development dependencies monthly.
  # See: https://github.com/dependabot/dependabot-core/issues/2390
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"
      # run these when most of our developers don't work
      day: "sunday"
      timezone: "Europe/Berlin"
    open-pull-requests-limit: 3
    commit-message:
      prefix: "infra"
    labels:
      - "sanity check required"
    groups:
      eslint:
        patterns:
          - "eslint*"
      esbuild:
        patterns:
          - "esbuild*"
      stylelint:
        patterns:
          - "stylelint*"
      patternfly:
        patterns:
          - "@patternfly*"
    ignore:
      - dependency-name: '@patternfly*'
        # https://issues.redhat.com/browse/INSTALLER-4073
        versions: '>= 6'
      - dependency-name: 'react'
        # https://github.com/patternfly/patternfly-react/issues/11345
        versions: '>= 19'