code-server/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"
      time: "11:00"
    ignore:
      # GitHub always delivers the latest versions for each major
      # release tag, so handle updates manually
      - dependency-name: "actions/*"

  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "daily"
      time: "11:00"
    ignore:
      - dependency-name: "@types/node"
        versions: ["14.x"]
chore: use dependabot to manage dependencies (#2830) Use dependabot to manage the dependencies defined in package.json and GitHub Actions workflows, so that we can proactively update versions. Outdated versions of third-party dependencies frequently have known security vulnerabilities with CVEs. 2021-03-13 03:46:18 +08:00			`version: 2`
			`updates:`
			`- package-ecosystem: "github-actions"`
			`directory: "/"`
			`schedule:`
			`interval: "daily"`
			`time: "11:00"`
			`ignore:`
			`# GitHub always delivers the latest versions for each major`
			`# release tag, so handle updates manually`
			`- dependency-name: "actions/*"`

			`- package-ecosystem: "npm"`
			`directory: "/"`
			`schedule:`
			`interval: "daily"`
			`time: "11:00"`
feat: add ignore block to dependabot config 2021-03-31 07:43:29 +08:00			`ignore:`
			`- dependency-name: "@types/node"`
			`versions: ["14.x"]`