From 7296b08966177d8e60732434f374995938ba20bc Mon Sep 17 00:00:00 2001 From: Chris Lovering Date: Sat, 4 Jan 2025 15:41:26 +0000 Subject: [PATCH] Configure dependabot to only open PRs for major version bumps Security updates will always open PRs --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f60e94af83..2f9f779097 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,6 +4,10 @@ updates: directory: "/" schedule: interval: "daily" + ignore: + update-types: + - sem-ver:patch + - sem-ver:minor - package-ecosystem: "github-actions" directory: "/" schedule: