mirror of
https://github.com/jellyfin/jellyfin-vue.git
synced 2025-02-13 02:21:06 +00:00
ci(renovate): improve lockfileMaintenance updates
* Reduce schedule: we're getting security alerts before the 2 months have reached. Instead of relying solely in vulnerability alerts PRs, is better if we can solve them proactively, hence updating lockfiles in a timely manner. * Enable dependency dashboard, requiring approvals for lockfileMaintenance updates: As seen in https://github.com/sindresorhus/eslint-plugin-unicorn/issues/2204#issuecomment-1781437403 we also might need to have our transitive and peer dependencies updated as well. Having the ability to trigger the lockfile maintenance manually it's a great QoL improvement for our workflow That issue is also related to #1985, where the issue was first discovered
This commit is contained in:
parent
c3219b5528
commit
1f803d4b5f
7
.github/renovate.json
vendored
7
.github/renovate.json
vendored
@ -45,10 +45,11 @@
|
||||
"matchUpdateTypes": [
|
||||
"lockFileMaintenance"
|
||||
],
|
||||
"groupSlug": "lockfiles"
|
||||
"groupSlug": "lockfiles",
|
||||
"dependencyDashboardApproval": true
|
||||
}
|
||||
],
|
||||
"dependencyDashboard": false,
|
||||
"dependencyDashboard": true,
|
||||
"prConcurrentLimit": 0,
|
||||
"prHourlyLimit": 0,
|
||||
"transitiveRemediation": true,
|
||||
@ -79,7 +80,7 @@
|
||||
"lockFileMaintenance": {
|
||||
"enabled": true,
|
||||
"schedule": [
|
||||
"every 2 months on the first day of the month"
|
||||
"every month"
|
||||
]
|
||||
},
|
||||
"assignees": [
|
||||
|
Loading…
x
Reference in New Issue
Block a user