From 4c31cb2e36f87f9f0470c4b43b723f59c917d3de Mon Sep 17 00:00:00 2001 From: Douglas Eichelberger Date: Mon, 12 Oct 2026 13:29:34 -0700 Subject: [PATCH] Have Dependabot update d3_graph_generator's npm packages Dependabot updated the gem's bundler dependencies and its actions, but not the packages of the graph app in d3_graph_generator/, such as vite and react. The npm entry points at that directory, whose yarn.lock is tracked, and takes the same monthly schedule, single group and 7-day cooldown as the other entries. spec/sample_app1 also has a Gemfile and Gemfile.lock, but it is a fixture for the specs, so it's left out. --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3239b02..dfa5cb7 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -20,3 +20,13 @@ updates: - "*" cooldown: default-days: 7 + - package-ecosystem: "npm" + directory: "/d3_graph_generator" + schedule: + interval: "monthly" + groups: + npm: + patterns: + - "*" + cooldown: + default-days: 7