dependabot.yml RawHistoryFolder

1version: 2
2updates:
3  # npm dependencies via pnpm
4  - package-ecosystem: 'npm'
5    directory: '/'
6    schedule:
7      interval: 'weekly'
8      day: 'monday'
9      time: '09:00'
10      timezone: 'Europe/Paris'
11    # Group updates to reduce PR noise
12    groups:
13      # Group SvelteKit and related core framework updates
14      sveltekit:
15        patterns:
16          - '@sveltejs/*'
17          - 'svelte*'
18        update-types:
19          - 'minor'
20          - 'patch'
21      # Group development tooling updates
22      dev-tools:
23        patterns:
24          - 'eslint*'
25          - 'prettier*'
26          - '@eslint/*'
27          - 'typescript*'
28          - '@types/*'
29          - 'vite*'
30          - 'vitest*'
31        update-types:
32          - 'minor'
33          - 'patch'
34      # Group Tailwind CSS related packages
35      tailwind:
36        patterns:
37          - 'tailwindcss*'
38          - '@tailwindcss/*'
39          - 'autoprefixer'
40        update-types:
41          - 'minor'
42          - 'patch'
43    # Set PR limits to avoid overwhelming the team
44    open-pull-requests-limit: 8
45    # Ignore packages that require manual updates or are pinned for specific reasons
46    ignore:
47      # Node.js version is managed via engines field and should be manually updated
48      - dependency-name: 'node'
49      # Major framework versions should be manually reviewed due to breaking changes
50      - dependency-name: '@sveltejs/kit'
51        update-types: ['version-update:semver-major']
52      - dependency-name: 'svelte'
53        update-types: ['version-update:semver-major']
54      - dependency-name: 'typescript'
55        update-types: ['version-update:semver-major']
56    # Configure commit message format
57    commit-message:
58      prefix: 'deps'
59      include: 'scope'