Commit Graph
3 Commits
Author SHA1 Message Date
J3vbandClaude Opus 5 79037418cc ci: group stryker and vitest dependabot updates into single PRs
Both families version-lock their packages with exact peer pins
(typescript-checker@9.6.0 requires core@9.6.0, not ^9.6.0), so
dependabot's default PR-per-package split breaks npm install whenever
only some of them merge. This is what took main down today.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-07-28 16:27:54 +02:00
jevb 614e6adfe3 chore: restrict Dependabot to minor/patch bumps only
Major version bumps (vite 6→8, vitest 3→4, actions v4→v6) need
manual review and testing. Adds semver-major ignore rules to all
four ecosystems to prevent noisy PRs.
2026-03-19 18:19:51 +01:00
jevb 73576cd27c ci: add GitHub best practices config (templates, dependabot, CI optimization)
- Add PR template, bug report and feature request issue templates
- Add Dependabot for Go, npm, Cargo, and GitHub Actions dependencies
- Update CI: narrow triggers to main push + PRs only, add concurrency
  groups, split client into fast check + gated Tauri build (PRs to main),
  add coverage artifacts with 7-day retention
- Update release workflow: replace legacy WPF build with Tauri NSIS
  installer build
- Remove legacy WPF client-build-test job from CI
- All optimized for GitHub Free plan (no CodeQL, conserve minutes)
2026-03-17 02:45:44 +01:00