Further align job definition config with observed GitHub defaults #1536
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Fixes #1531.
Fixes #1527 (comment).
Improves performance under default configuration by only updating direct dependencies rather than all dependencies, which is what GitHub Dependabot does; #1518, #1441, #1527 (comment).
Further attempts to align the job definition config with what has been observed in GitHub Dependabot job logs.
https://github.com/epicstar/dependabot-yarn-test/actions/runs/12361191169/job/34497817700
Configuration changes
allow.dependency-type
now defaults todirect
instead ofall
commit-message.include
now only accepts the valuescope
ignore.version-requirement
now accepts both string and string array valuesignore
rules now automatically populatesource
andupdated-at