diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index af7312c3..00000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,17 +0,0 @@ -version: 2 -updates: - - package-ecosystem: "npm" - directory: "/react/" - schedule: - interval: "weekly" - commit-message: - prefix: "[npm]" - include: "scope" - target-branch: "react-rewrite" - groups: - dependencies: - applies-to: version-updates - patterns: - - "*" - exclude-patterns: - - "@biomejs/*" diff --git a/.github/renovate.json b/.github/renovate.json new file mode 100644 index 00000000..5744ff66 --- /dev/null +++ b/.github/renovate.json @@ -0,0 +1,38 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "config:recommended", + "helpers:pinGitHubActionDigests", + "abandonments:recommended" + ], + "dependencyDashboard": false, + "separateMajorMinor": false, + "lockFileMaintenance": { + "enabled": true, + "automerge": true + }, + "packageRules": [ + { + "matchManagers": [ + "npm", + "mise" + ], + "groupName": "npm dependencies", + "schedule": [ + "* 0-3 * * 1" + ], + "automerge": true + }, + { + + "matchManagers": [ + "github-actions" + ], + "groupName": "github-actions", + "schedule": [ + "* 0-3 1 * *" + ], + "automerge": true + } + ] +} \ No newline at end of file diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml deleted file mode 100644 index 7a9acd1a..00000000 --- a/.github/workflows/auto-approve.yml +++ /dev/null @@ -1,12 +0,0 @@ -name: Auto approve - -on: pull_request_target - -jobs: - auto-approve: - runs-on: ubuntu-24.04 - permissions: - pull-requests: write - if: github.actor == 'dependabot[bot]' - steps: - - uses: hmarr/auto-approve-action@v4 diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml deleted file mode 100644 index 3ebcb059..00000000 --- a/.github/workflows/dependabot-auto-merge.yml +++ /dev/null @@ -1,32 +0,0 @@ -name: Dependabot Auto-Merge -on: - pull_request_target: - types: - - opened - workflow_run: - workflows: ["CodeQL", "Lint", "Build"] - branches: [react-rewrite] - types: - - completed - -permissions: - pull-requests: write - contents: write - -jobs: - dependabot: - runs-on: ubuntu-24.04 - if: ${{ github.actor == 'dependabot[bot]'}} - steps: - - name: Dependabot metadata - id: metadata - uses: dependabot/fetch-metadata@v2 - with: - github-token: "${{ secrets.GITHUB_TOKEN }}" - - - name: Enable auto-merge for Dependabot PRs - if: ${{steps.metadata.outputs.update-type != 'version-update:semver-major'}} - run: gh pr merge --auto --squash "$PR_URL" - env: - PR_URL: ${{ github.event.pull_request.html_url }} - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 6e605e31..546dc000 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -9,9 +9,6 @@ jobs: Build-and-Push: runs-on: ubuntu-24.04 - # We want to filter out dependabot - # automated pushes to main - if: ${{ github.actor != 'dependabot[bot]'}} steps: - name: Checkout uses: actions/checkout@v5 diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 698d844d..d083341a 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -283,8 +283,8 @@ packages: '@types/react': optional: true - '@dotenvx/dotenvx@1.59.1': - resolution: {integrity: sha512-Qg+meC+XFxliuVSDlEPkKnaUjdaJKK6FNx/Wwl2UxhQR8pyPIuLhMavsF7ePdB9qFZUWV1jEK3ckbJir/WmF4w==} + '@dotenvx/dotenvx@1.60.0': + resolution: {integrity: sha512-zWepVRNan/5gCALiT/QCHVsmxvq81xenBqGRyoTUy+ClJ+Mgs+tTJ6h4f65nqs8ijVFe6xg4lIQAIwe+HfgWXg==} hasBin: true '@ecies/ciphers@0.2.6': @@ -1606,8 +1606,8 @@ packages: resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==} engines: {node: 18 || 20 || >=22} - baseline-browser-mapping@2.10.14: - resolution: {integrity: sha512-fOVLPAsFTsQfuCkvahZkzq6nf8KvGWanlYoTh0SVA0A/PIUxQGU2AOZAoD95n2gFLVDW/jP6sbGLny95nmEuHA==} + baseline-browser-mapping@2.10.15: + resolution: {integrity: sha512-1nfKCq9wuAZFTkA2ey/3OXXx7GzFjLdkTiFVNwlJ9WqdI706CZRIhEqjuwanjMIja+84jDLa9rcyZDPDiVkASQ==} engines: {node: '>=6.0.0'} hasBin: true @@ -1815,8 +1815,8 @@ packages: resolution: {integrity: sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw==} engines: {node: '>=0.3.1'} - dotenv@17.4.0: - resolution: {integrity: sha512-kCKF62fwtzwYm0IGBNjRUjtJgMfGapII+FslMHIjMR5KTnwEmBmWLDRSnc3XSNP8bNy34tekgQyDT0hr7pERRQ==} + dotenv@17.4.1: + resolution: {integrity: sha512-k8DaKGP6r1G30Lx8V4+pCsLzKr8vLmV2paqEj1Y55GdAgJuIqpRp5FfajGF8KtwMxCz9qJc6wUIJnm053d/WCw==} engines: {node: '>=12'} dunder-proto@1.0.1: @@ -3197,6 +3197,10 @@ packages: resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==} engines: {node: '>=10'} + yocto-spinner@1.1.0: + resolution: {integrity: sha512-/BY0AUXnS7IKO354uLLA2eRcWiqDifEbd6unXCsOxkFDAkhgUL3PH9X2bFoaU0YchnDXsF+iKleeTLJGckbXfA==} + engines: {node: '>=18.19'} + yoctocolors-cjs@2.1.3: resolution: {integrity: sha512-U/PBtDf35ff0D8X8D0jfdzHYEPFxAI7jJlxZXwCSez5M3190m+QobIfh+sWDWSHMCWWJN2AWamkegn6vr6YBTw==} engines: {node: '>=18'} @@ -3436,10 +3440,10 @@ snapshots: optionalDependencies: '@types/react': 19.2.14 - '@dotenvx/dotenvx@1.59.1': + '@dotenvx/dotenvx@1.60.0': dependencies: commander: 11.1.0 - dotenv: 17.4.0 + dotenv: 17.4.1 eciesjs: 0.4.18 execa: 5.1.1 fdir: 6.5.0(picomatch@4.0.4) @@ -3447,6 +3451,7 @@ snapshots: object-treeify: 1.1.33 picomatch: 4.0.4 which: 4.0.0 + yocto-spinner: 1.1.0 '@ecies/ciphers@0.2.6(@noble/ciphers@1.3.0)': dependencies: @@ -4471,7 +4476,7 @@ snapshots: balanced-match@4.0.4: {} - baseline-browser-mapping@2.10.14: {} + baseline-browser-mapping@2.10.15: {} binary-extensions@2.3.0: {} @@ -4503,7 +4508,7 @@ snapshots: browserslist@4.28.2: dependencies: - baseline-browser-mapping: 2.10.14 + baseline-browser-mapping: 2.10.15 caniuse-lite: 1.0.30001785 electron-to-chromium: 1.5.331 node-releases: 2.0.37 @@ -4642,7 +4647,7 @@ snapshots: diff@8.0.4: {} - dotenv@17.4.0: {} + dotenv@17.4.1: {} dunder-proto@1.0.1: dependencies: @@ -5762,7 +5767,7 @@ snapshots: '@babel/parser': 7.29.2 '@babel/plugin-transform-typescript': 7.28.6(@babel/core@7.29.0) '@babel/preset-typescript': 7.28.5(@babel/core@7.29.0) - '@dotenvx/dotenvx': 1.59.1 + '@dotenvx/dotenvx': 1.60.0 '@modelcontextprotocol/sdk': 1.29.0(zod@3.25.76) '@types/validate-npm-package-name': 4.0.2 browserslist: 4.28.2 @@ -6093,6 +6098,10 @@ snapshots: yocto-queue@0.1.0: {} + yocto-spinner@1.1.0: + dependencies: + yoctocolors: 2.1.2 + yoctocolors-cjs@2.1.3: {} yoctocolors@2.1.2: {}