mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 00:54:21 +08:00
09c8cd6ff6- Configure `DEPS:` commit message prefix - Add 7 day cooldown configuration. This should reduce busywork, and serves as a small additional mitigation against supply chain attacks. - Remove `moment` ignores. We don't vendor this any more
115 lines
2.6 KiB
YAML
Vendored
115 lines
2.6 KiB
YAML
Vendored
version: 2
|
|
updates:
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
commit-message:
|
|
prefix: "DEPS"
|
|
- package-ecosystem: bundler
|
|
directory: "/"
|
|
schedule:
|
|
interval: daily
|
|
time: "08:00"
|
|
timezone: Australia/Sydney
|
|
commit-message:
|
|
prefix: "DEPS"
|
|
cooldown:
|
|
default-days: 7
|
|
open-pull-requests-limit: 20
|
|
versioning-strategy: lockfile-only
|
|
allow:
|
|
- dependency-type: direct
|
|
- dependency-type: indirect
|
|
ignore:
|
|
- dependency-name: aws-partitions
|
|
versions:
|
|
- "> 1.329.0"
|
|
- "< 2"
|
|
- dependency-name: aws-sdk-core
|
|
versions:
|
|
- "> 3.99.1"
|
|
- "< 4"
|
|
- dependency-name: aws-sdk-kms
|
|
versions:
|
|
- "> 1.31.0"
|
|
- "< 2"
|
|
- dependency-name: aws-sdk-s3
|
|
versions:
|
|
- "> 1.66.0"
|
|
- "< 2"
|
|
- dependency-name: aws-sdk-sns
|
|
versions:
|
|
- "> 1.25.1"
|
|
- "< 2"
|
|
- dependency-name: aws-sigv4
|
|
versions:
|
|
- "> 1.2.0"
|
|
- "< 2"
|
|
- dependency-name: aws-sdk-mediaconvert
|
|
versions:
|
|
- "> 1.160.0"
|
|
- "< 2"
|
|
groups:
|
|
rails:
|
|
patterns:
|
|
- "actionmailer"
|
|
- "actionpack"
|
|
- "actionview"
|
|
- "activemodel"
|
|
- "activerecord"
|
|
- "activejob"
|
|
- "activesupport"
|
|
- "railties"
|
|
sass:
|
|
patterns:
|
|
- "sass*"
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: daily
|
|
time: "08:00"
|
|
timezone: Australia/Sydney
|
|
commit-message:
|
|
prefix: "DEPS"
|
|
cooldown:
|
|
default-days: 7
|
|
exclude: [
|
|
"@discourse/*"
|
|
]
|
|
open-pull-requests-limit: 20
|
|
versioning-strategy: increase
|
|
ignore:
|
|
- dependency-name: "webpack" # Recent versions have bugs with `/static` loading. We're working to move away from webpack anyway.
|
|
groups:
|
|
babel:
|
|
patterns:
|
|
- "@babel*"
|
|
embroider:
|
|
patterns:
|
|
- "@embroider*"
|
|
highlightjs:
|
|
patterns:
|
|
- "@highlightjs/cdn-assets"
|
|
- "highlight.js"
|
|
prosemirror:
|
|
patterns:
|
|
- "prosemirror-*"
|
|
types:
|
|
patterns:
|
|
- "@types/*"
|
|
- "@glint/*"
|
|
- "typescript"
|
|
uppy:
|
|
patterns:
|
|
- "@uppy*"
|
|
fullcalendar:
|
|
patterns:
|
|
- "@fullcalendar/*"
|
|
lint:
|
|
patterns:
|
|
- "@discourse/lint-configs"
|
|
- "eslint"
|
|
- "prettier"
|
|
- "ember-template-lint"
|
|
- "stylelint"
|
