Merge branch 'main' into fix-goreleaser-config

ecadlabs · Aug 2, 2023 · aab5c9c · aab5c9c
2 parents 50e98dd + 1c991b3
commit aab5c9c
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -4,10 +4,15 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+      day: "monday"
+      time: "19:00"
     pull-request-branch-name:
       separator: "-"
   - package-ecosystem: "npm"
-    directory: "/website"
+    #we'd like to disable dependabot opening PR for npm. it is noisy, and, npm is only used for the static website, not signatory itself
+    #currently, dependabot does not support ignoring a subdir https://github.com/dependabot/dependabot-core/issues/4364
+    #so, we'll point it at a subdir that contains no package-lock.json, to disable it's scanning of npm packages
+    directory: "/integration_test"
     schedule:
       interval: "weekly"
     pull-request-branch-name: