mirror of
https://github.com/johannesjo/super-productivity.git
synced 2026-07-18 08:56:41 +00:00
437b43cc92
Adds a Dependabot group to pick up the v3.0.0 major bump when Node 24 support lands, preventing build failures when GitHub Actions drops Node 20. Closes #7035
72 lines
1.9 KiB
YAML
72 lines
1.9 KiB
YAML
# Dependabot configuration for automated dependency updates
|
|
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
|
|
|
|
version: 2
|
|
updates:
|
|
# ==========================================
|
|
# npm Dependencies (Monthly Updates)
|
|
# ==========================================
|
|
- package-ecosystem: 'npm'
|
|
directory: '/'
|
|
schedule:
|
|
interval: 'monthly'
|
|
day: 'monday'
|
|
time: '09:00'
|
|
timezone: 'Europe/Berlin'
|
|
|
|
open-pull-requests-limit: 10
|
|
|
|
reviewers:
|
|
- 'johannesjo'
|
|
|
|
labels:
|
|
- 'dependencies'
|
|
- 'npm'
|
|
|
|
commit-message:
|
|
prefix: 'chore(deps)'
|
|
|
|
# ==========================================
|
|
# GitHub Actions (Weekly Updates - SECURITY)
|
|
# ==========================================
|
|
# Automatically updates pinned action SHAs when new versions release
|
|
# This is critical for security: keeps SHA pins up-to-date with patches
|
|
- package-ecosystem: 'github-actions'
|
|
directory: '/'
|
|
schedule:
|
|
interval: 'weekly'
|
|
day: 'monday'
|
|
time: '09:00'
|
|
timezone: 'Europe/Berlin'
|
|
|
|
# Limit concurrent PRs to avoid overwhelming maintainers
|
|
open-pull-requests-limit: 5
|
|
|
|
# Require @johannesjo approval (matches CODEOWNERS)
|
|
reviewers:
|
|
- 'johannesjo'
|
|
|
|
# Label PRs for easy filtering and security awareness
|
|
labels:
|
|
- 'dependencies'
|
|
- 'security'
|
|
- 'github-actions'
|
|
|
|
# Consistent commit message format
|
|
commit-message:
|
|
prefix: 'chore(deps)'
|
|
include: 'scope'
|
|
|
|
# Group minor and patch updates together to reduce PR noise
|
|
groups:
|
|
github-actions-minor:
|
|
patterns:
|
|
- '*'
|
|
update-types:
|
|
- 'minor'
|
|
- 'patch'
|
|
softprops-action-gh-release-major:
|
|
patterns:
|
|
- 'softprops/action-gh-release'
|
|
update-types:
|
|
- 'major'
|