From 7632cedf57b1595445bc02090ab78a3fe3636909 Mon Sep 17 00:00:00 2001 From: Joshua Fernandes Date: Wed, 15 Apr 2026 12:38:40 +1000 Subject: [PATCH 1/2] add dependabot config --- .github/dependabot.yml | 51 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..ca5cc4b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,51 @@ +version: 2 + +updates: + # Docusaurus + npm deps + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "09:00" + # wait 7 days for stability + cooldown: + default-days: 7 + groups: + docusaurus: + patterns: + - "@docusaurus/*" + react: + patterns: + - "react*" + others: + patterns: + - "*" + open-pull-requests-limit: 5 + labels: + - "dependencies" + + # GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "09:00" + # wait 7 days for stability + cooldown: + default-days: 7 + groups: + gha-dependencies: + patterns: + - "*" + # Optional: exclude major versions so we can review these + # update-types: + # - "minor" + # - "patch" + + open-pull-requests-limit: 5 + labels: + - "dependencies" + + From cc885477461a8a987793aaaf0fcc7a5846d87214 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Apr 2026 02:45:12 +0000 Subject: [PATCH 2/2] build(deps-dev): bump lodash-es from 4.17.21 to 4.18.1 Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.21 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1) --- updated-dependencies: - dependency-name: lodash-es dependency-version: 4.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4888ddc..7a1933d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12385,10 +12385,11 @@ "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==" }, "node_modules/lodash-es": { - "version": "4.17.21", - "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz", - "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==", - "dev": true + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.18.1.tgz", + "integrity": "sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==", + "dev": true, + "license": "MIT" }, "node_modules/lodash.camelcase": { "version": "4.3.0",