Chore(dependabot): Add explicit dependabot config to raise PRs for major version bumps (#39640)

* chore(dependabot): introduce explicit npm settings

* Chore(dependabot): ignore minor/patch versions for now

* Chore(dependabot): Ignore some things that will probably require work.

* Chore(dependabot): Let's keep the yaml formatting consistent

* Chore(dependabot): Remove zone.js as it's not used anymore

* Chore(dependabot): Update reviewers to frontend-ops team

* Chore(dependabot): Set the correct frontend-ops group :|

Co-authored-by: Jack Westbrook <jack.westbrook@gmail.com>

.github/dependabot.yml

@@ -8,3 +8,19 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    ignore:
+      # ignore minor/patch updates for now
+      - dependency-name: "*"
+        update-types: ["version-update:semver-minor", "version-update:semver-patch"]
+      # things that will probably need some thinking
+      - dependency-name: "d3"
+      - dependency-name: "husky"
+      - dependency-name: "slate"
+      - dependency-name: "slate-plain-serializer"
+    reviewers:
+      - "grafana/frontend-ops"
+    versioning-strategy: "increase-if-necessary"

package.json

@@ -222,8 +222,7 @@
     "webpack-cli": "4.8.0",
     "webpack-dev-server": "4.0.0",
     "webpack-merge": "5.8.0",
-    "worker-loader": "^3.0.8",
-    "zone.js": "0.7.8"
+    "worker-loader": "^3.0.8"
   },
   "dependencies": {
     "@emotion/css": "11.1.3",

yarn.lock

@@ -25038,11 +25038,6 @@ z-schema@~3.18.3:
   optionalDependencies:
     commander "^2.7.1"
 
-zone.js@0.7.8:
-  version "0.7.8"
-  resolved "https://registry.yarnpkg.com/zone.js/-/zone.js-0.7.8.tgz#4f3fe8834d44597f2639053a0fa438df34fffded"
-  integrity sha1-Tz/og01EWX8mOQU6D6Q43zT//e0=
-
 zwitch@^1.0.0:
   version "1.0.5"
   resolved "https://registry.yarnpkg.com/zwitch/-/zwitch-1.0.5.tgz#d11d7381ffed16b742f6af7b3f223d5cd9fe9920"