admin
e7f0070e84
Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.
20 lines
737 B
YAML
20 lines
737 B
YAML
# Security-updates-only posture: open-pull-requests-limit: 0 disables scheduled
|
|
# version-bump PRs while keeping Dependabot security PRs, and `ignore` applies
|
|
# to both kinds.
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 0
|
|
cooldown:
|
|
default-days: 7
|
|
ignore:
|
|
# @anthropic-ai/bedrock-sdk 0.30.0+ broke invoice OCR and the assistant in
|
|
# prod (empty Bedrock streams, 2026-07 outage; see DECISIONS.md). The
|
|
# dependency is pinned to 0.29.1 in package.json; a bump must be a
|
|
# deliberate, verified change, never an automated PR.
|
|
- dependency-name: "@anthropic-ai/bedrock-sdk"
|
|
versions: [">=0.30.0"]
|