From 77652273b8c0fd11beae42a08622ce9cfa7fd9e9 Mon Sep 17 00:00:00 2001 From: Kevin Dew Date: Tue, 17 Jan 2023 21:58:24 +0000 Subject: [PATCH] Add npm to dependabot monitoring This is so that dependabot can raise PRs for changes in dependencies referenced in the package.json file, which is currently just jQuery. My motivation for adding this is noticing we weren't getting dependabot PRs to update jQuery from 1.12. --- .github/dependabot.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index df100b5a..7b74efd8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,6 +5,11 @@ updates: schedule: interval: daily + - package-ecosystem: npm + directory: / + schedule: + interval: daily + # Ruby needs to be upgraded manually in multiple places, so cannot # be upgraded by Dependabot. That effectively makes the below # config redundant, as ruby is the only updatable thing in the