Commit Graph

9 Commits

Author SHA1 Message Date
Joe Previte
75e6ab1197
fix(dependabot): limit limiter updates 2021-05-20 11:59:27 -07:00
Jonathan Yu
416362be31 chore: ignore updates to microsoft/playwright-github-action
Microsoft publishes updates to this action using the same scheme
as GitHub, where the v1 tag is updated to the latest release of
the 1.0 series. Therefore, we can manage updates manually.
2021-05-12 18:47:37 +00:00
Joe Previte
e48de92c7f
chore: add codeql-action to dependabot config 2021-04-27 15:38:09 -07:00
Joe Previte
e86c0f8c87
chore: ignore 15.x @types/node updates 2021-04-27 15:25:38 -07:00
Joe Previte
b6b56797a3
chore(deps): limit xdg-basedir updates 2021-04-06 11:15:59 -07:00
Joe Previte
4218431782
chore: ignore 13.x updates for @types/node 2021-03-31 13:31:23 -07:00
Joe Previte
d140c2c8e7
feat: add ignore block to dependabot config 2021-03-30 16:43:29 -07:00
Joe Previte
9cbe27ef83
fix: remove reviewers/assignees for dependabot 2021-03-17 11:52:46 -07:00
Jonathan Yu
7b1fe3156d
chore: use dependabot to manage dependencies (#2830)
Use dependabot to manage the dependencies defined in package.json and
GitHub Actions workflows, so that we can proactively update versions.

Outdated versions of third-party dependencies frequently have known
security vulnerabilities with CVEs.
2021-03-12 11:46:18 -08:00