Skip to content

Commit d5e278d

Browse files
build(dependabot): allow security updates of @angular packages
1 parent 33cef42 commit d5e278d

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

.github/dependabot.yml

+8-2
Original file line numberDiff line numberDiff line change
@@ -15,8 +15,14 @@ updates:
1515
prefix: "build(deps)"
1616
prefix-development: "build(dev-deps)"
1717
ignore:
18-
# Do not update @angular dependencies at all; these are updated manually
18+
# Ignore version updates (major, minor, and patch) for @angular dependencies
19+
# (these are updated manually)
20+
# Security updates are still allowed
1921
- dependency-name: "@angular*"
20-
# Do not update major versions
22+
update-types:
23+
- "version-update:semver-major"
24+
- "version-update:semver-minor"
25+
- "version-update:semver-patch"
26+
# Ignore only major version updates for other dependencies
2127
- dependency-name: "*"
2228
update-types: ["version-update:semver-major"]

0 commit comments

Comments
 (0)