diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9a9e6427..eb7ada5f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,6 +8,11 @@ updates: schedule: interval: "weekly" open-pull-requests-limit: 1 + ignore: + # Ignore patch updates (major.minor.patch) for all packages. This + # does not prevent security updates. + - dependency-name: "*" + update-types: ["version-update:semver-patch"] # Enable version updates from GitHub Actions. - package-ecosystem: "github-actions" @@ -15,3 +20,8 @@ updates: schedule: interval: "weekly" open-pull-requests-limit: 1 + ignore: + # Ignore patch updates (major.minor.patch) for all packages. This + # does not prevent security updates. + - dependency-name: "*" + update-types: ["version-update:semver-patch"]