From 86640b617f8bfdd7923917621570a0a7c3c8c12d Mon Sep 17 00:00:00 2001
From: John Ryan <ryjohn@google.com>
Date: Thu, 11 May 2023 13:42:25 -0700
Subject: [PATCH] Reduce dependabot pull requests for web_embedding (#1810)

This configures dependabot to check for out-of-date NPM packages weekly
instead of daily, and limits it to direct dependencies. There could be
more we could do if we dig through the [Configuration options for the
dependabot.yml
file](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file)
documentation.

cc: @ditman

fixes #1809
---
 .github/dependabot.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 34aa3d0ad..320063125 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -224,4 +224,6 @@ updates:
   - package-ecosystem: "npm"
     directory: "web_embedding/ng-flutter"
     schedule:
-      interval: "daily"
+      interval: "weekly"
+    allow:
+      - dependency-type: "direct"