Merge pull request #37 from nbtca/add-dependabot.yml

ci: add dependabot.yml
This commit is contained in:
clas 2025-04-04 19:55:29 +08:00 committed by GitHub
commit 45a0a26da9
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

14
.github/dependabot.yml vendored Normal file
View file

@ -0,0 +1,14 @@
# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
# Enable version updates for npm
- package-ecosystem: "pnpm"
# Look for `package.json` and `lock` files in the `root` directory
directory: "/"
# Check the npm registry for updates every day (weekdays)
schedule:
interval: "weekly"