# Dependabot — Лидерра (#27) # Docs: https://docs.github.com/code-security/dependabot/dependabot-version-updates # Создаёт PR автоматически при выходе обновлений зависимостей. # CI-workflow dependency-check.yml — параллельный, оставить (разные задачи). version: 2 updates: # Root package.json: markdownlint-cli2, cspell, pa11y-ci, stylelint, lefthook, npm-run-all2 - package-ecosystem: npm directory: / schedule: interval: weekly day: monday time: "09:00" timezone: Europe/Moscow open-pull-requests-limit: 5 labels: - dependencies groups: dev-tools: patterns: - "markdownlint-cli2" - "cspell" - "@cspell/*" - "pa11y*" - "stylelint*" - "lefthook" - "npm-run-all2" # app/package.json: Vue, Vuetify, Vite, Vitest, ESLint, Prettier, Histoire, etc. - package-ecosystem: npm directory: /app schedule: interval: weekly day: monday time: "09:00" timezone: Europe/Moscow open-pull-requests-limit: 10 labels: - dependencies groups: vue-ecosystem: patterns: - "vue" - "vue-*" - "@vue/*" - "vuetify" - "vite" - "vite-*" - "@vitejs/*" - "vite-plugin-*" - "laravel-vite-plugin" vitest: patterns: - "vitest" - "@vitest/*" eslint: patterns: - "eslint" - "eslint-*" - "@eslint/*" - "prettier" - "eslint-config-prettier" histoire: patterns: - "histoire" - "@histoire/*" # app/composer.json: Laravel 13, Pest 4, Pint, Larastan, Boost, IDE Helper, etc. - package-ecosystem: composer directory: /app schedule: interval: weekly day: monday time: "09:00" timezone: Europe/Moscow open-pull-requests-limit: 10 labels: - dependencies groups: laravel-framework: patterns: - "laravel/framework" - "laravel/sanctum" - "laravel/tinker" - "laravel/pail" - "laravel/pao" - "nunomaduro/collision" pest: patterns: - "pestphp/*" dev-tools: patterns: - "larastan/larastan" - "barryvdh/laravel-ide-helper" - "fakerphp/faker" - "laravel/pint" - "mockery/mockery"