mirror of https://github.com/FriendsOfTYPO3/tea.git synced 2024-09-20 04:56:13 +02:00
tea/.github/dependabot.yml
Oliver Klee 98884d36fa
[BUGFIX] Block Dependabot from breaking upgrades (#469)
composer-noramlize >= 2.2.0 will conflicts with our supported PHP
version range, as does PHPUnit 9.x (and 10.x will too).

So we need to configure Dependabot to stay below these breaking
versions.

Fixes #467
2022-06-28 21:30:42 +02:00

25 lines
692 B
YAML

# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
milestone: 5
- package-ecosystem: "composer"
directory: "/"
schedule:
interval: "daily"
allow:
- dependency-type: "development"
ignore:
- dependency-name: "ergebnis/composer-normalize"
versions: [ "^2.20" ]
- dependency-name: "phpunit/phpunit"
versions: [ "^9.0", "^10.0" ]
- dependency-name: "symfony/yaml"
- dependency-name: "typo3/cms-*"
versioning-strategy: "increase"
milestone: 5