better dependency grouping for dependabot (#495)

Signed-off-by: Brian DeHamer <[email protected]>
theupdateframework · Oct 20, 2023 · 1f866aa · 1f866aa
1 parent ffc362f
commit 1f866aa
Showing 1 changed file with 18 additions and 6 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -7,14 +7,26 @@ updates:
   versioning-strategy: auto
   open-pull-requests-limit: 10
   groups:
-    dev-dependencies:
-      patterns:
-        - "@types/*"
-        - "@typescript-eslint/*"
-        - "eslint*"
-        - "prettier"
+    prod-deps:
+      dependency-type: "production"
+      update-types:
+        - "minor"
+        - "patch"
+      exclude-patterns:
+        - "tuf-js"
+        - "@tufjs/*"
+    dev-deps:
+      dependency-type: "development"
+      update-types:
+        - "minor"
+        - "patch"
 - package-ecosystem: "github-actions"
   directory: "/"
   schedule:
       interval: daily
   open-pull-requests-limit: 10
+  groups:
+    minor-patch:
+      update-types:
+        - "minor"
+        - "patch"