test: only surface production dependency vulnerabilities, not dev dep…

…endency vulnerabilities (#5304) I have no idea why this isn't the default, here are some threads on the issues: dependabot/dependabot-core#4146 dependabot/dependabot-core#2521 facebook/create-react-app#11174
tilt-dev · Dec 17, 2021 · 25fc4b6 · 25fc4b6
1 parent 7602472
commit 25fc4b6
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,14 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/**"
+    schedule:
+      interval: "daily"
+    allow:
+      - dependency-type: "production"
+  - package-ecosystem: "gomod"
+    directory: "/**"
+    schedule:
+      interval: "daily"
+    allow:
+      - dependency-type: "production"