Configure dependabot not to create PR's for major versions

Issue-ID: PORTALNG-144
Change-Id: I163cd13bae640d43bb0e444bddcfe6b6203e72d1
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8979dd8..93d7a42 100644 (file)
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,6 +10,11 @@ updates:
     # Check the npm registry for updates every day (weekdays)
     schedule:
       interval: "weekly"
+    ignore:
+      # For all deps
+      - dependency-name: "*"
+        # ignore all major updates
+        update-types: ["version-update:semver-major"]
 
   # Enable version updates for Docker
   - package-ecosystem: "docker"