sentry/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: npm
    open-pull-requests-limit: 10
    directory: '/'
    schedule:
      # Going to start with a high interval, and then tone it back
      interval: daily
      timezone: America/Los_Angeles
      time: '15:30'
    reviewers:
      - '@getsentry/owners-js-deps'
    labels: []
    ignore:
      # For all packages, ignore all patch updates
      - dependency-name: '*'
        update-types: ['version-update:semver-patch']

      # Babel updates all really should happen in unison, so let's keep these
      # ignored for now and manually handle it
      #
      # XXX(epurkhiser): Explicitly don't ignore core so we can be reminded to
      # upgrade all of them.
      #
      # - dependency-name: "@babel/core"
      - dependency-name: '@babel/plugin-proposal-decorators'
      - dependency-name: '@babel/plugin-transform-react-jsx'
      - dependency-name: '@babel/plugin-transform-react-jsx-source'
      - dependency-name: '@babel/plugin-transform-runtime'
      - dependency-name: '@babel/preset-env'
      - dependency-name: '@babel/preset-react'
      - dependency-name: '@babel/preset-typescript'
      - dependency-name: '@babel/runtime'

      # Sentry updates should all happen in unison, same as above we ignore
      # all but one as a reminder.
      # - dependency-name: "@sentry/react"
      - dependency-name: '@sentry/node'
      - dependency-name: '@sentry/utils'
      - dependency-name: '@sentry/tracing'
      - dependency-name: '@sentry/integrations'
      - dependency-name: '@sentry/rrweb'

      # We ignore everything that hasn't yet been upgrade, this way we will
      # only get the _freshest_ of new packages to consider upgrading
      - dependency-name: '@types/marked'
      - dependency-name: '@types/react-router'
      - dependency-name: '@types/react-select'
      - dependency-name: '@types/reflux'
      - dependency-name: 'babel-jest'
      - dependency-name: 'gettext-parser'
      - dependency-name: 'jest-junit'
      - dependency-name: 'marked'
      - dependency-name: 'react-lazyload'
      - dependency-name: 'react-refresh'
      - dependency-name: 'react-router'
      - dependency-name: 'react-select'
      - dependency-name: 'reflux'
      - dependency-name: 'sprintf-js'
      - dependency-name: 'u2f-api'
  - package-ecosystem: 'docker'
    directory: 'self-hosted/'
    schedule:
      interval: 'daily'
    reviewers:
      - '@getsentry/open-source'
      - '@getsentry/security'
    # security only updates
    open-pull-requests-limit: 0