We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 2c59477 commit a6ce883Copy full SHA for a6ce883
1 file changed
.github/dependabot.yml
@@ -9,6 +9,17 @@ updates:
9
directory: /
10
schedule:
11
interval: weekly
12
- # Ignore all dependency manifests in the `playground` directory.
+ # exclude-paths only prevents version updates, not security updates.
13
exclude-paths:
14
- playground/**
15
+
16
+ # Playground directories use intentionally outdated/vulnerable versions
17
+ # to test the extension's diagnostics features.
18
+ # `ignore` is required because `exclude-paths` does NOT prevent security updates.
19
+ - package-ecosystem: npm
20
+ directories:
21
+ - playground/**
22
+ schedule:
23
+ interval: weekly
24
+ ignore:
25
+ - dependency-name: '*'
0 commit comments