mirror of
https://github.com/jellyfin/jellyfin-vue.git
synced 2024-10-07 11:33:40 +00:00
1f803d4b5f
* Reduce schedule: we're getting security alerts before the 2 months have reached. Instead of relying solely in vulnerability alerts PRs, is better if we can solve them proactively, hence updating lockfiles in a timely manner. * Enable dependency dashboard, requiring approvals for lockfileMaintenance updates: As seen in https://github.com/sindresorhus/eslint-plugin-unicorn/issues/2204#issuecomment-1781437403 we also might need to have our transitive and peer dependencies updated as well. Having the ability to trigger the lockfile maintenance manually it's a great QoL improvement for our workflow That issue is also related to #1985, where the issue was first discovered
95 lines
1.7 KiB
JSON
95 lines
1.7 KiB
JSON
{
|
|
"timezone": "Europe/Madrid",
|
|
"packageRules": [
|
|
{
|
|
"matchManagers": [
|
|
"npm"
|
|
],
|
|
"matchDepTypes": [
|
|
"devDependencies"
|
|
],
|
|
"groupName": "npm development dependencies",
|
|
"groupSlug": "npm-dev"
|
|
},
|
|
{
|
|
"matchManagers": [
|
|
"npm"
|
|
],
|
|
"matchDepTypes": [
|
|
"dependencies"
|
|
],
|
|
"groupName": "npm dependencies",
|
|
"groupSlug": "npm"
|
|
},
|
|
{
|
|
"matchManagers": [
|
|
"github-actions"
|
|
],
|
|
"separateMajorMinor": false,
|
|
"groupName": "CI dependencies",
|
|
"groupSlug": "ci-deps"
|
|
},
|
|
{
|
|
"matchManagers": [
|
|
"cargo"
|
|
],
|
|
"matchUpdateTypes": [
|
|
"patch",
|
|
"minor",
|
|
"major"
|
|
],
|
|
"groupName": "cargo dependencies",
|
|
"groupSlug": "cargo"
|
|
},
|
|
{
|
|
"matchUpdateTypes": [
|
|
"lockFileMaintenance"
|
|
],
|
|
"groupSlug": "lockfiles",
|
|
"dependencyDashboardApproval": true
|
|
}
|
|
],
|
|
"dependencyDashboard": true,
|
|
"prConcurrentLimit": 0,
|
|
"prHourlyLimit": 0,
|
|
"transitiveRemediation": true,
|
|
"osvVulnerabilityAlerts": true,
|
|
"vulnerabilityAlerts": {
|
|
"enabled": true,
|
|
"groupName": "vulnerable dependencies",
|
|
"groupSlug": "vulnerabilities",
|
|
"labels": [
|
|
"security",
|
|
"dependencies"
|
|
]
|
|
},
|
|
"ignoreDeps": [
|
|
"npm",
|
|
"node"
|
|
],
|
|
"enabledManagers": [
|
|
"npm",
|
|
"github-actions",
|
|
"cargo"
|
|
],
|
|
"labels": [
|
|
"dependencies"
|
|
],
|
|
"rebaseWhen": "behind-base-branch",
|
|
"rangeStrategy": "pin",
|
|
"lockFileMaintenance": {
|
|
"enabled": true,
|
|
"schedule": [
|
|
"every month"
|
|
]
|
|
},
|
|
"assignees": [
|
|
"ferferga",
|
|
"ThibaultNocchi"
|
|
],
|
|
"reviewers": [
|
|
"ferferga",
|
|
"ThibaultNocchi"
|
|
]
|
|
}
|