Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add dependabot.yml for automated dependency updates #21

Merged
merged 1 commit into from
Dec 12, 2024

Conversation

alarocca130
Copy link
Contributor

Proposed changes

This PR introduces a dependabot.yml configuration file to enable automated dependency updates. This helps:

  • Keep dependencies up-to-date with minimal manual intervention.
  • Patch vulnerabilities quickly and improve security.
  • Simplify dependency management for maintainers and contributors.

The proposed configuration schedules daily updates for the npm ecosystem and can be adjusted based on team preferences.

For more details, see GitHub's Dependabot documentation.
Suggestions or changes to this configuration are welcome!

JIRA issue: PRESS11-46

Type of Change

Production

  • Bugfix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Dependency update
  • Refactoring / housekeeping (changes to files not directly related to functionality)

Development

  • Tests
  • Dependency update
  • Environment update / refactoring
  • Documentation Update

Checklist

  • I have read the CONTRIBUTING doc
  • I have viewed my change in a web-browser
  • Linting and tests pass locally with my changes
  • I have added tests that prove my fix is effective or that my feature works
  • I have added necessary documentation (if appropriate)

@circlecube circlecube merged commit 7a7590c into main Dec 12, 2024
4 of 6 checks passed
@circlecube circlecube deleted the dependencies/add-dependabot-configuration branch December 16, 2024 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants