chore: fix dependabot on private (#129)

contentful · Nov 8, 2023 · 0fbf549 · 0fbf549 · vercel · Nov 8, 2023
2 parents 2e793f8 + 257433e
commit 0fbf549
Showing 1 changed file with 42 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,42 @@
+version: 2
+
+registries:
+  npm-registry-registry-npmjs-org:
+    type: npm-registry
+    url: https://registry.npmjs.org
+    token: '${{secrets.NPM_REGISTRY_REGISTRY_NPMJS_ORG_TOKEN}}'
+
+updates:
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'daily'
+      time: '05:00'
+      timezone: UTC
+    commit-message:
+      prefix: build
+      include: scope
+    labels:
+      - 'dependencies'
+      - 'dependabot'
+      - 'main-private'
+    open-pull-requests-limit: 2
+    reviewers:
+      - 'contentful/team-tolkien'
+    registries:
+      - npm-registry-registry-npmjs-org
+    allow:
+      - dependency-name: '@contentful/live-preview'
+    target-branch: 'main-private'
+
+  - package-ecosystem: github-actions
+    directory: '/'
+    schedule:
+      interval: daily
+      time: '05:00'
+      timezone: UTC
+    open-pull-requests-limit: 15
+    commit-message:
+      prefix: build
+      include: scope
+    target-branch: 'main-private'