Skip to content

Conversation

alarocca130
Copy link
Contributor

Proposed changes

This PR introduces a dependabot.yml configuration file to enable automated dependency updates. This helps:

  • Keep dependencies up-to-date with minimal manual intervention.
  • Patch vulnerabilities quickly and improve security.
  • Simplify dependency management for maintainers and contributors.

The proposed configuration schedules daily updates for the npm ecosystem and can be adjusted based on team preferences.

For more details, see GitHub's Dependabot documentation.
Suggestions or changes to this configuration are welcome!

JIRA issue: PRESS11-46

Type of Change

Production

  • Bugfix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Dependency update
  • Refactoring / housekeeping (changes to files not directly related to functionality)

Development

  • Tests
  • Dependency update
  • Environment update / refactoring
  • Documentation Update

Checklist

  • I have read the CONTRIBUTING doc
  • I have viewed my change in a web-browser
  • Linting and tests pass locally with my changes
  • I have added tests that prove my fix is effective or that my feature works
  • I have added necessary documentation (if appropriate)

@circlecube circlecube merged commit aa2468b into main Jan 13, 2025
@circlecube circlecube mentioned this pull request Mar 3, 2025
14 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants