Files
iptvnator/.github/dependabot.yml
T
4gray 011f322807 ci(nx): enforce synchronized dependency updates (#1343)
* ci(nx): enforce lockstep dependency versions

* ci(deps): group Nx updates explicitly

* docs(nx): document coordinated dependency updates

* fix(nx): validate peer dependency versions

* fix(nx): validate duplicate root declarations
2026-08-02 12:52:37 +02:00

58 lines
1.6 KiB
YAML

# Every Dependabot PR triggers the full pipeline (~15 jobs), so version
# updates are batched weekly. Nx minor+patch updates use a dedicated group so
# official packages move together; other minor+patch updates are grouped per
# ecosystem, and majors remain individual. Security updates are separate and
# are not limited by this schedule; CI enforces complete Nx lockstep.
version: 2
updates:
- package-ecosystem: npm
directory: /
schedule:
interval: weekly
day: monday
time: '06:00'
open-pull-requests-limit: 5
groups:
nx-version-updates:
applies-to: version-updates
patterns:
- nx
- '@nx/*'
update-types:
- minor
- patch
nx-security-updates:
applies-to: security-updates
patterns:
- nx
- '@nx/*'
npm-minor-patch:
applies-to: version-updates
exclude-patterns:
- nx
- '@nx/*'
update-types:
- minor
- patch
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
day: monday
time: '06:00'
groups:
actions-minor-patch:
patterns:
- '*'
update-types:
- minor
- patch
- package-ecosystem: docker
directory: /docker
schedule:
interval: weekly
day: monday
time: '06:00'