yaml version: 2 updates:

第一个包生态系统：npm

• package-ecosystem: "npm"

  依赖文件所在目录，例如根目录为 "/"

  directory: "/"

  检查更新的频率

  schedule: interval: "weekly" day: "monday" time: "09:00" timezone: "Asia/Shanghai"

  目标分支

  target-branch: "main"

  允许更新的类型：安全修复优先

  open-pull-requests-limit: 5

  为 PR 添加的标签

  labels:
  • "dependencies"
  • "security"

  版本处理策略

  versioning-strategy: increase

  可忽略特定的依赖

  ignore:
  • dependency-name: "express" versions: ["4.x"]

  为每个包生态系统配置 PR 分配者

  assignees:
  • "octocat"

  允许自动安全更新

  security-updates-only: false

第二个包生态系统：pip (Python)

• package-ecosystem: "pip" directory: "/" schedule: interval: "daily"