Files
cacti/.github/dependabot.yml
Thomas Vincent f3ff777992 ci: install locked shared plugin test dependencies (#8345)
* ci: install locked shared plugin test dependencies

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* docs: explain pinned tooling checkout for plugin CI

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

---------

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
2026-10-14 00:01:08 -07:00

121 lines
4.2 KiB
YAML

# GitHub reads this configuration from develop, including updates for 1.2.x.
# Group routine releases; unmatched major upgrades get individual PRs.
# Cooldowns apply to version updates, not security fixes.
version: 2
updates:
- package-ecosystem: github-actions
directory: /
schedule: {interval: weekly, day: friday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
github-actions: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, github_actions]
commit-message: {prefix: ci, include: scope}
- package-ecosystem: composer
directory: /
schedule: {interval: weekly, day: monday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
composer: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, composer]
commit-message: {prefix: deps, include: scope}
- package-ecosystem: github-actions
directory: /
target-branch: 1.2.x
schedule: {interval: weekly, day: friday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
github-actions-1-2-x: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, github_actions, 1.2.x]
commit-message: {prefix: ci, include: scope}
- package-ecosystem: composer
directory: /api
schedule: {interval: weekly, day: monday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
composer-api: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, composer]
commit-message: {prefix: deps, include: scope}
- package-ecosystem: composer
directory: /
target-branch: 1.2.x
schedule: {interval: weekly, day: monday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
composer-1-2-x: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, composer]
commit-message: {prefix: deps, include: scope}
- package-ecosystem: npm
directory: /
schedule: {interval: weekly, day: monday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
npm: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, "area:ui"]
commit-message: {prefix: deps, include: scope}
- package-ecosystem: npm
directory: /
target-branch: 1.2.x
schedule: {interval: weekly, day: monday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
npm-1-2-x: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, "area:ui", 1.2.x]
commit-message: {prefix: deps, include: scope}
ignore:
- dependency-name: jquery
update-types: ["version-update:semver-major"]
# 1.2.x loads screenfull's classic script; v6+ only ships ESM.
- dependency-name: screenfull
versions: [">=6.0.0"]
- package-ecosystem: npm
directory: /tests/e2e
schedule: {interval: weekly, day: monday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
npm-e2e: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, "area:ui"]
commit-message: {prefix: deps, include: scope}
- package-ecosystem: npm
directory: /tests/e2e
target-branch: 1.2.x
schedule: {interval: weekly, day: monday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
npm-e2e-1-2-x: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, "area:ui", 1.2.x]
commit-message: {prefix: deps, include: scope}
- package-ecosystem: composer
directory: /tests
target-branch: 1.2.x
schedule: {interval: weekly, day: monday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
composer-tests-1-2-x: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, composer, 1.2.x]
commit-message: {prefix: deps, include: scope}
- package-ecosystem: composer
directory: /tests/tools/plugin-harness
schedule: {interval: weekly, day: monday}
open-pull-requests-limit: 5
cooldown: {default-days: 7}
groups:
plugin-harness: {patterns: ["*"], update-types: [minor, patch]}
labels: [dependencies, composer]
commit-message: {prefix: deps, include: scope}