|
|
|
@ -5,9 +5,9 @@
|
|
|
|
|
':labels(dependencies)',
|
|
|
|
|
':maintainLockFilesMonthly', // update non-direct dependencies monthly
|
|
|
|
|
':prConcurrentLimitNone', // Remove limit for open PRs at any time.
|
|
|
|
|
':prHourlyLimit2' // Rate limit PR creation to a maximum of two per hour.
|
|
|
|
|
':prHourlyLimit2', // Rate limit PR creation to a maximum of two per hour.
|
|
|
|
|
],
|
|
|
|
|
minimumReleaseAge: "3", // Wait 3 days after the package has been published before upgrading it
|
|
|
|
|
minimumReleaseAge: '3', // Wait 3 days after the package has been published before upgrading it
|
|
|
|
|
// packageRules order is important, they are applied from top to bottom and are merged,
|
|
|
|
|
// meaning the most important ones must be at the bottom, for example grouping rules
|
|
|
|
|
// If we do not want a package to be grouped with others, we need to set its groupName
|
|
|
|
@ -42,7 +42,7 @@
|
|
|
|
|
'react-router-dom',
|
|
|
|
|
],
|
|
|
|
|
matchUpdateTypes: ['major'],
|
|
|
|
|
"dependencyDashboardApproval": true
|
|
|
|
|
dependencyDashboardApproval: true,
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
// Require Dependency Dashboard Approval for major version bumps of these Ruby packages
|
|
|
|
@ -56,7 +56,7 @@
|
|
|
|
|
'redis', // Requires manual upgrade and sync with Sidekiq version
|
|
|
|
|
],
|
|
|
|
|
matchUpdateTypes: ['major'],
|
|
|
|
|
"dependencyDashboardApproval": true
|
|
|
|
|
dependencyDashboardApproval: true,
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
// Update Github Actions and Docker images weekly
|
|
|
|
@ -68,21 +68,21 @@
|
|
|
|
|
matchManagers: ['dockerfile'],
|
|
|
|
|
matchPackageNames: ['moritzheiber/ruby-jemalloc'],
|
|
|
|
|
matchUpdateTypes: ['minor', 'major'],
|
|
|
|
|
"dependencyDashboardApproval": true
|
|
|
|
|
dependencyDashboardApproval: true,
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
// Require Dependency Dashboard Approval for major bumps for the node image, this needs to be synced with .nvmrc
|
|
|
|
|
matchManagers: ['dockerfile'],
|
|
|
|
|
matchPackageNames: ['node'],
|
|
|
|
|
matchUpdateTypes: ['major'],
|
|
|
|
|
"dependencyDashboardApproval": true
|
|
|
|
|
dependencyDashboardApproval: true,
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
// Require Dependency Dashboard Approval for major postgres bumps in the docker-compose file, as those break dev environments
|
|
|
|
|
matchManagers: ['docker-compose'],
|
|
|
|
|
matchPackageNames: ['postgres'],
|
|
|
|
|
matchUpdateTypes: ['major'],
|
|
|
|
|
"dependencyDashboardApproval": true
|
|
|
|
|
dependencyDashboardApproval: true,
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
// Update devDependencies every week, with one grouped PR
|
|
|
|
|