mirror of
https://github.com/twentyhq/twenty.git
synced 2026-04-18 14:01:45 -04:00
## Summary - Adds `exclude-paths` configuration to Dependabot to skip `packages/twenty-apps/community/**` - Community-maintained apps have their own dependency management and don't need the same security requirements as core packages ## Test plan - Verify Dependabot no longer creates alerts/PRs for dependencies in community apps
18 lines
478 B
YAML
18 lines
478 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
exclude-paths:
|
|
- "packages/twenty-apps/community/**"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 3
|
|
versioning-strategy: "lockfile-only"
|
|
assignees:
|
|
- "mabdullahabaid"
|
|
ignore:
|
|
- dependency-name: "@graphql-yoga/nestjs"
|
|
- dependency-name: "@nestjs/graphql"
|
|
- dependency-name: "@ptc-org/nestjs-query-graphql"
|
|
- dependency-name: "typeorm"
|