From 4dc4bab12effaba92c13e238dd948123bfc3428b Mon Sep 17 00:00:00 2001
From: Andrew Hughes-Onslow <kalpaitch@users.noreply.github.com>
Date: Thu, 1 Aug 2024 10:13:51 +0100
Subject: [PATCH] Update dependabot configuration

Proposing ignoring major updates to `@types/node` because we have a fixed node version, and `@govuk-frontend` because this usually requires an design update.
---
 .github/dependabot.yml | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b27975b1d..ebebc7c61 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,7 +1,11 @@
 version: 2
 updates:
   - package-ecosystem: npm
-    directory: /
+    directories:
+      - "/express"
+      - "/backend/api"
+      - "/backend/cognito"
+      - "/"
     schedule:
       interval: daily
     labels:
@@ -16,6 +20,17 @@ updates:
         update-types:
           - "minor"
           - "patch"
+      dev-dependencies:
+        applies-to: version-updates
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+    ignore:
+      - dependency-name: "@types/node"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "@govuk-frontend"
+        update-types: ["version-update:semver-major"]
   - package-ecosystem: github-actions
     directory: /
     schedule: