chore: align gh actions and dependabot with ecosystem standard (#637)

storyblok · Jan 17, 2025 · 22e78a2 · 22e78a2
1 parent afb0cb4
commit 22e78a2
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 2 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -4,8 +4,23 @@ updates:
     directory: /
     schedule:
       interval: daily
-      time: '03:00'
+      time: '04:00'
     commit-message:
       prefix: fix
       prefix-development: chore
       include: scope
+    labels:
+      - dependabot
+    groups:
+      security-updates:
+        patterns:
+          - '*'
+        exclude-patterns:
+          - 'storyblok*'
+        update-types:
+          - patch
+    ignore:
+      - dependency-name: '*'
+        update-types:
+          - version-update:semver-minor
+          - version-update:semver-major
diff --git a/.github/workflows/dependabot-automerge.yml → .github/workflows/dependabot-autoapprove.yml b/.github/workflows/dependabot-automerge.yml → .github/workflows/dependabot-autoapprove.yml
@@ -7,7 +7,7 @@ permissions:
 jobs:
   dependabot:
     runs-on: ubuntu-latest
-    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'storyblok/storyblok-react'
+    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'storyblok/storyblok-js'
     steps:
       - name: Dependabot metadata
         id: metadata