halfnelson / svelte-native

Svelte controlling native components via Nativescript
MIT License
1.82k stars 78 forks source link

chore: add a dependabot config #360

Open benmccann opened 3 months ago

benmccann commented 3 months ago

I noticed that most of the open PRs are from dependabot, which I think is pretty noisy by default. This PR will have dependabot ignore minor/patch upgrades and only attempt major upgrades to spare the distraction in the PR queue. This file only affects dependency updates, so dependabot may still send minor/patch upgrades if a dependency has a security issue