sentry/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: npm
    open-pull-requests-limit: 10
    directory: '/'
    schedule:
      # Going to start with a high interval, and then tone it back
      interval: daily
      timezone: America/Los_Angeles
      time: '15:30'
    reviewers:
      - '@getsentry/owners-js-deps'
    labels: []
    # Group dependency updates together in one PR
    # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups
    groups:
      # The name of the group, it will be used in PR titles and branch
      babel-dependencies:
        patterns:
          - '@babel/*'
      sentry-dependencies:
        patterns:
          - '@sentry/*'
      spectrum-dependencies:
        patterns:
          - '@react-stately/*'
          - '@react-aria/*'
          - '@react-types/*'
      emotion-dependencies:
        patterns:
          - '@emotion/*'
      jest-dependencies:
        patterns:
          - 'jest'
          - 'jest-*'
      react-testing-library-dependencies:
        patterns:
          - '@testing-library/*'
      react-dependencies:
        patterns:
          - 'react'
          - 'react-dom'
          - '@types/react'
          - '@types/react-dom'
      webpack-dependencies:
        patterns:
          - 'webpack'
          - 'webpack-*'
    ignore:
      # For all packages, ignore all patch updates
      - dependency-name: '*'
        update-types: ['version-update:semver-patch']

      # We ignore everything that hasn't yet been upgrade, this way we will
      # only get the _freshest_ of new packages to consider upgrading
      - dependency-name: '@types/react-router'
      - dependency-name: '@types/react-select'
      - dependency-name: '@types/reflux'
      - dependency-name: 'gettext-parser'
      - dependency-name: 'react-lazyload'
      - dependency-name: 'react-router'
      - dependency-name: 'react-select'
      - dependency-name: 'reflux'
      - dependency-name: 'sprintf-js'
      - dependency-name: 'u2f-api'
  - package-ecosystem: 'docker'
    directory: 'self-hosted/'
    schedule:
      interval: 'daily'
    reviewers:
      - '@getsentry/open-source'
      - '@getsentry/security'
    # security only updates
    open-pull-requests-limit: 0
  - package-ecosystem: pip
    directory: '/'
    schedule:
      interval: daily
    open-pull-requests-limit: 2
    allow:
      - dependency-name: 'sentry-sdk'
        dependency-type: 'direct'