mirror of
https://github.com/jellyfin/jellyfin-vue.git
synced 2026-09-03 05:10:26 +03:00
ci(renovate): improve lockfileMaintenance updates
* Reduce schedule: we're getting security alerts before the 2 months have reached. Instead of relying solely in vulnerability alerts PRs, is better if we can solve them proactively, hence updating lockfiles in a timely manner. * Enable dependency dashboard, requiring approvals for lockfileMaintenance updates: As seen in https://github.com/sindresorhus/eslint-plugin-unicorn/issues/2204#issuecomment-1781437403 we also might need to have our transitive and peer dependencies updated as well. Having the ability to trigger the lockfile maintenance manually it's a great QoL improvement for our workflow That issue is also related to #1985, where the issue was first discovered
This commit is contained in:
@@ -45,10 +45,11 @@
|
||||
"matchUpdateTypes": [
|
||||
"lockFileMaintenance"
|
||||
],
|
||||
"groupSlug": "lockfiles"
|
||||
"groupSlug": "lockfiles",
|
||||
"dependencyDashboardApproval": true
|
||||
}
|
||||
],
|
||||
"dependencyDashboard": false,
|
||||
"dependencyDashboard": true,
|
||||
"prConcurrentLimit": 0,
|
||||
"prHourlyLimit": 0,
|
||||
"transitiveRemediation": true,
|
||||
@@ -79,7 +80,7 @@
|
||||
"lockFileMaintenance": {
|
||||
"enabled": true,
|
||||
"schedule": [
|
||||
"every 2 months on the first day of the month"
|
||||
"every month"
|
||||
]
|
||||
},
|
||||
"assignees": [
|
||||
|
||||
Reference in New Issue
Block a user