Merge pull request #882 from aiarena/updating-security-updates-with-d…

…irect-dependencies updating security updates with direct dependencies
aiarena · Jan 2, 2025 · 55fcc4d · 55fcc4d
2 parents 67e9b55 + f1810b2
commit 55fcc4d
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -13,11 +13,14 @@ updates:
     schedule:
       interval: "daily"
     open-pull-requests-limit: 10
-    applies-to: security-updates
-    groups:
-      security-updates:
-        patterns:
-          - "*" 
+    allow:
+      - dependency-type: "direct"
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - "version-update:semver-major"
+          - "version-update:semver-minor"
+    security-updates-only: true
 
   # Frontend dependencies (security updates grouped)
   # - package-ecosystem: npm