Unverified Commit 5283bdeb authored by Yifan Xiong's avatar Yifan Xiong Committed by GitHub
Browse files

CI/CD - Disable version update, allow security update only (#224)

Disable dependabot version update, allow security update only.
Reference:
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#open-pull-requests-limit.
parent 849b6cac
...@@ -5,6 +5,7 @@ updates: ...@@ -5,6 +5,7 @@ updates:
directory: "/" directory: "/"
schedule: schedule:
interval: "weekly" interval: "weekly"
open-pull-requests-limit: 0
allow: allow:
- dependency-type: "direct" - dependency-type: "direct"
labels: labels:
...@@ -16,6 +17,7 @@ updates: ...@@ -16,6 +17,7 @@ updates:
directory: "/website/" directory: "/website/"
schedule: schedule:
interval: "weekly" interval: "weekly"
open-pull-requests-limit: 0
labels: labels:
- "dependencies" - "dependencies"
assignees: assignees:
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment