npm-audit-pipeline/.github/dependabot.yml

Using npm audit in deployment pipelines

version: 2
updates:
  - package-ecosystem: npm
    directory: '/'
    schedule:
      interval: daily
    open-pull-requests-limit: 10
    ignore:
      - dependency-name: eslint-config-prettier
        versions:
          - 7.2.0
          - 8.0.0
          - 8.1.0
          - 8.2.0
      - dependency-name: eslint
        versions:
          - 7.18.0
          - 7.19.0
          - 7.20.0
          - 7.21.0
          - 7.22.0
          - 7.23.0
          - 7.24.0
      - dependency-name: y18n
        versions:
          - 4.0.1
          - 4.0.2
      - dependency-name: husky
        versions:
          - 4.3.8
          - 5.0.9
          - 5.1.0
          - 5.1.1
          - 5.1.2
          - 5.1.3
          - 5.2.0
      - dependency-name: eslint-plugin-prettier
        versions:
          - 3.3.1