Use .ncurc.json instead of args in command line and enforce decisions in Dependabot

Author: julien-deramond

.github/dependabot.yml

@@ -15,14 +15,31 @@ updates:
     directory: "/"
     labels:
       - dependencies
-      - v5
+      - v6
     schedule:
       interval: weekly
       day: tuesday
       time: "12:00"
       timezone: Europe/Athens
     versioning-strategy: increase
     rebase-strategy: disabled
+    ignore:
+      - dependency-name: "@docsearch/js"
+        update-types:
+          - "version-update:semver-major"
+          - "version-update:semver-minor"
+      - dependency-name: "karma-browserstack-launcher"
+        update-types:
+          - "version-update:semver-major"
+          - "version-update:semver-minor"
+      - dependency-name: "karma-rollup-preprocessor"
+        update-types:
+          - "version-update:semver-major"
+          - "version-update:semver-minor"
+      - dependency-name: "stylelint"
+        update-types:
+          - "version-update:semver-major"
+          - "version-update:semver-minor"
     groups:
       production-dependencies:
         dependency-type: "production"

.ncurc.json

@@ -0,0 +1,8 @@
+{
+  "reject": [
+    "@docsearch/js",
+    "karma-browserstack-launcher",
+    "karma-rollup-preprocessor",
+    "stylelint"
+  ]
+}

package.json

@@ -95,7 +95,7 @@
     "docs-serve": "npm run astro-dev -- --host",
     "docs-serve-only": "npx sirv-cli _site --port 9001",
     "lockfile-lint": "lockfile-lint --allowed-hosts npm --allowed-schemes https: --empty-hostname false --type npm --path package-lock.json",
-    "update-deps": "ncu -u -x @docsearch/js,karma-browserstack-launcher,karma-rollup-preprocessor,stylelint",
+    "update-deps": "ncu -u",
     "release": "npm-run-all dist release-sri docs-build release-zip*",
     "release-sri": "node build/generate-sri.mjs",
     "release-version": "node build/change-version.mjs",