Setup dependabot to upgrade REST client _dev_ dependencies so that li…

…brary clients can specify their own versions of production dependencies
ministryofjustice · Oct 6, 2023 · 81dfad1 · 81dfad1
1 parent a5ea523
commit 81dfad1
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 4 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,18 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /clients/node
+    allow:
+      - dependency-type: development
+    ignore:
+      - dependency-type: production
+      - dependency-name: @types/node
+        versions:
+          - ">=19"
+    schedule:
+      interval: weekly
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
diff --git a/clients/node/package-lock.json b/clients/node/package-lock.json
diff --git a/clients/node/package.json b/clients/node/package.json
@@ -27,8 +27,8 @@
     "node": "18 || 20"
   },
   "dependencies": {
-    "agentkeepalive": "~4",
-    "superagent": "~8"
+    "agentkeepalive": ">=4",
+    "superagent": ">=8"
   },
   "devDependencies": {
     "@tsconfig/node18": "^18.2.2",