Files
expressjs.com/.github/dependabot.yml
StepSecurity Bot fc56d27543 [StepSecurity] Apply security best practices (#1905)
* [StepSecurity] Apply security best practices

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

* Update .github/dependabot.yml

* Update .github/dependabot.yml

* Update .github/dependabot.yml

* Update .github/dependabot.yml

* Delete .github/workflows/dependency-review.yml

* Update dependabot.yml

* ci: pin crowdin actions

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

---------

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>
Co-authored-by: Ulises Gascón <ulisesgascongonzalez@gmail.com>
Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>
2025-05-27 21:15:08 -05:00

26 lines
497 B
YAML

version: 2
updates:
- package-ecosystem: github-actions
directory: /
schedule:
interval: monthly
- package-ecosystem: docker
directory: /
schedule:
interval: monthly
- package-ecosystem: bundler
directory: /
schedule:
interval: monthly
- package-ecosystem: npm
directory: /
schedule:
interval: monthly
open-pull-requests-limit: 10
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]