Merge pull request #262 from edwarddavidbaker/dependabot-ignore-patch…

…-updates dependabot: Ignore patch updates
intel · Jan 21, 2025 · 637384c · 637384c
2 parents 09f0bda + e7a85e8
commit 637384c
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -8,10 +8,20 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 1
+    ignore:
+      # Ignore patch updates (major.minor.patch) for all packages. This
+      # does not prevent security updates.
+      - dependency-name: "*"
+        update-types: ["version-update:semver-patch"]
 
   # Enable version updates from GitHub Actions.
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 1
+    ignore:
+      # Ignore patch updates (major.minor.patch) for all packages. This
+      # does not prevent security updates.
+      - dependency-name: "*"
+        update-types: ["version-update:semver-patch"]