Merge pull request #12579 from Bo98/dependabot-lockfile-only

dependabot.yml: lockfile-only versioning strategy
This commit is contained in:
Bo Anderson 2021-12-16 19:03:53 +00:00 committed by GitHub
commit 35700983dd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -16,6 +16,7 @@ updates:
interval: weekly
allow:
- dependency-type: all
versioning-strategy: lockfile-only
- package-ecosystem: bundler
directory: /Library/Homebrew
@ -25,3 +26,4 @@ updates:
- dependency-type: all
ignore:
- dependency-name: sorbet-runtime
versioning-strategy: lockfile-only