Merge pull request #12579 from Bo98/dependabot-lockfile-only

dependabot.yml: lockfile-only versioning strategy
This commit is contained in:
Bo Anderson 2021-12-16 19:03:53 +00:00 committed by GitHub
commit 35700983dd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -16,6 +16,7 @@ updates:
interval: weekly interval: weekly
allow: allow:
- dependency-type: all - dependency-type: all
versioning-strategy: lockfile-only
- package-ecosystem: bundler - package-ecosystem: bundler
directory: /Library/Homebrew directory: /Library/Homebrew
@ -25,3 +26,4 @@ updates:
- dependency-type: all - dependency-type: all
ignore: ignore:
- dependency-name: sorbet-runtime - dependency-name: sorbet-runtime
versioning-strategy: lockfile-only