Exclude community apps from Dependabot scanning (#17345)
## Summary - Adds `exclude-paths` configuration to Dependabot to skip `packages/twenty-apps/community/**` - Community-maintained apps have their own dependency management and don't need the same security requirements as core packages ## Test plan - Verify Dependabot no longer creates alerts/PRs for dependencies in community apps
This commit is contained in:
@@ -2,6 +2,8 @@ version: 2
|
|||||||
updates:
|
updates:
|
||||||
- package-ecosystem: "npm"
|
- package-ecosystem: "npm"
|
||||||
directory: "/"
|
directory: "/"
|
||||||
|
exclude-paths:
|
||||||
|
- "packages/twenty-apps/community/**"
|
||||||
schedule:
|
schedule:
|
||||||
interval: "weekly"
|
interval: "weekly"
|
||||||
open-pull-requests-limit: 3
|
open-pull-requests-limit: 3
|
||||||
|
|||||||
Reference in New Issue
Block a user