mirror of
https://github.com/DOI-DO/j40-cejst-2.git
synced 2025-02-23 10:04:18 -08:00
ba047ff643
Fixes: https://github.com/usds/justice40-tool/issues/1121 It's unclear whether this file is doing what we want it to do. This is an open issue in the dependabot repo. Added a comment to document the current status of what's going on here. If these keep coming up (which they probably will), we might either want to disable dependabot or document a quick workflow for verifying this is a dev only issue (https://github.com/usds/justice40-tool/issues/1121 might be that documentation).
11 lines
373 B
YAML
11 lines
373 B
YAML
# It's unclear whether this configuration is supported for stopping dev only
|
|
# security issues, see https://github.com/usds/justice40-tool/issues/1121 and
|
|
# https://github.com/dependabot/dependabot-core/issues/2521.
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "npm"
|
|
directory: "/**"
|
|
schedule:
|
|
interval: "daily"
|
|
allow:
|
|
- dependency-type: "production"
|