From 486db5722b9291476af6ed5f60317fbdc0354b0e Mon Sep 17 00:00:00 2001
From: Danny Avila <danny@librechat.ai>
Date: Thu, 19 Sep 2024 18:14:11 -0400
Subject: [PATCH] =?UTF-8?q?=F0=9F=A4=96=20ci:=20Configure=20Dependabot=20f?=
 =?UTF-8?q?or=20Security=20Updates=20(#4134)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/dependabot.yml           | 72 +++++++++++++++-----------------
 .github/workflows/dependabot.yml | 41 ------------------
 2 files changed, 33 insertions(+), 80 deletions(-)
 delete mode 100644 .github/workflows/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index ccdc68d81b..ffba9ed264 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,47 +1,41 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
 version: 2
 updates:
-  - package-ecosystem: "npm" # See documentation for possible values
-    directory: "/api" # Location of package manifests
-    target-branch: "dev"
-    versioning-strategy: increase-if-necessary
+  - package-ecosystem: "npm"
+    directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "daily"
+    open-pull-requests-limit: 10
+    versioning-strategy: auto
     allow:
-      # Allow both direct and indirect updates for all packages
-      - dependency-type: "all"
-    commit-message:
-      prefix: "npm api prod"
-      prefix-development: "npm api dev"
-      include: "scope"
-  - package-ecosystem: "npm" # See documentation for possible values
-    directory: "/client" # Location of package manifests
-    target-branch: "dev"
-    versioning-strategy: increase-if-necessary
+      - dependency-type: "direct"
+    security-updates-only: true
+
+  - package-ecosystem: "npm"
+    directory: "/api"
     schedule:
-      interval: "weekly"
+      interval: "daily"
+    open-pull-requests-limit: 10
+    versioning-strategy: auto
     allow:
-      # Allow both direct and indirect updates for all packages
-      - dependency-type: "all"
-    commit-message:
-      prefix: "npm client prod"
-      prefix-development: "npm client dev"
-      include: "scope"
-  - package-ecosystem: "npm" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    target-branch: "dev"
-    versioning-strategy: increase-if-necessary
+      - dependency-type: "direct"
+    security-updates-only: true
+
+  - package-ecosystem: "npm"
+    directory: "/client"
     schedule:
-      interval: "weekly"
+      interval: "daily"
+    open-pull-requests-limit: 10
+    versioning-strategy: auto
     allow:
-      # Allow both direct and indirect updates for all packages
-      - dependency-type: "all"
-    commit-message:
-      prefix: "npm all prod"
-      prefix-development: "npm all dev"
-      include: "scope" 
-     
+      - dependency-type: "direct"
+    security-updates-only: true
+
+  - package-ecosystem: "npm"
+    directory: "/packages/data-provider"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 10
+    versioning-strategy: auto
+    allow:
+      - dependency-type: "direct"
+    security-updates-only: true
\ No newline at end of file
diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
deleted file mode 100644
index ffba9ed264..0000000000
--- a/.github/workflows/dependabot.yml
+++ /dev/null
@@ -1,41 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-    versioning-strategy: auto
-    allow:
-      - dependency-type: "direct"
-    security-updates-only: true
-
-  - package-ecosystem: "npm"
-    directory: "/api"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-    versioning-strategy: auto
-    allow:
-      - dependency-type: "direct"
-    security-updates-only: true
-
-  - package-ecosystem: "npm"
-    directory: "/client"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-    versioning-strategy: auto
-    allow:
-      - dependency-type: "direct"
-    security-updates-only: true
-
-  - package-ecosystem: "npm"
-    directory: "/packages/data-provider"
-    schedule:
-      interval: "daily"
-    open-pull-requests-limit: 10
-    versioning-strategy: auto
-    allow:
-      - dependency-type: "direct"
-    security-updates-only: true
\ No newline at end of file