RSSHub/.github/dependabot.yml

33 lines
1.2 KiB
YAML

version: 2
updates:
- package-ecosystem: npm
directory: '/'
schedule:
interval: daily
time: '08:00'
open-pull-requests-limit: 100
labels:
- dependencies
ignore:
# pin to version before it is sold to potential suspicious party
# https://github.com/goofychris/art-template/issues/660 the issue created from original author stating v4.13.3
# contains suspicious code and related issues (#658, #659) were deleted
# related:
# https://github.com/fastify/point-of-view/issues/463 https://github.com/cnpm/bug-versions/pull/266
# https://github.com/yoimiya-kokomi/Miao-Yunzai/pull/515 https://github.com/zhangfisher/flex-tools/commit/09b565dfe6e2932bb829613ddbe09f6d0acbccd4
# https://github.com/fastify/point-of-view/pull/461#issuecomment-2718888986
- dependency-name: art-template
versions: ['>=4.13.3']
# no longer includes KJUR.crypto.Cipher for RSA
- dependency-name: jsrsasign
versions: ['>=11.0.0']
- package-ecosystem: 'github-actions'
directory: '/'
schedule:
interval: daily
time: '08:00'
open-pull-requests-limit: 100
labels:
- dependencies