ci(renovate): improve lockfileMaintenance updates

* Reduce schedule: we're getting security alerts before the 2 months have reached.
Instead of relying solely in vulnerability alerts PRs,
is better if we can solve them proactively,
hence updating lockfiles in a timely manner.

* Enable dependency dashboard,
requiring approvals for lockfileMaintenance updates:
As seen in
https://github.com/sindresorhus/eslint-plugin-unicorn/issues/2204#issuecomment-1781437403
we also might need to have our transitive and peer dependencies updated as well.
Having the ability to trigger the lockfile maintenance manually
it's a great QoL improvement for our workflow

That issue is also related to #1985, where the issue was first discovered
This commit is contained in:
Fernando Fernández 2023-10-26 18:48:06 +02:00 committed by GitHub
parent c3219b5528
commit 1f803d4b5f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -45,10 +45,11 @@
"matchUpdateTypes": [
"lockFileMaintenance"
],
"groupSlug": "lockfiles"
"groupSlug": "lockfiles",
"dependencyDashboardApproval": true
}
],
"dependencyDashboard": false,
"dependencyDashboard": true,
"prConcurrentLimit": 0,
"prHourlyLimit": 0,
"transitiveRemediation": true,
@ -79,7 +80,7 @@
"lockFileMaintenance": {
"enabled": true,
"schedule": [
"every 2 months on the first day of the month"
"every month"
]
},
"assignees": [