e0fcb7412f
- Widen engines range to >=24 <27 - Test against Node 24 and 26 in CI (build/deploy artefacts remain on 24) - Replace unmaintained 'cbor' dependency with 'cbor2': the cbor package's synchronous encode relies on a single stream read() returning the whole encoding, which breaks on Node 26 where readable streams return one buffer at a time - Remove stale dependabot ignore for the removed cbor package - Update Node.js support notes in README and AGENTS
96 lines
2.6 KiB
YAML
96 lines
2.6 KiB
YAML
# See the documentation for all configuration options:
|
|
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
|
|
|
|
version: 2
|
|
updates:
|
|
#
|
|
# Check for minor/patch versions only on a weekly basis - we are likely to be able to
|
|
# merge these routinely. Major versions we'll check for and update manually.
|
|
#
|
|
- package-ecosystem: 'npm'
|
|
directory: '/'
|
|
versioning-strategy: increase
|
|
schedule:
|
|
interval: 'weekly'
|
|
day: 'friday'
|
|
time: '03:00'
|
|
timezone: Europe/London
|
|
cooldown:
|
|
default-days: 2
|
|
commit-message:
|
|
prefix: 'chore (deps): '
|
|
ignore:
|
|
# we'll do any major version updates manually
|
|
- dependency-name: '*'
|
|
update-types: ['version-update:semver-major']
|
|
# packages we can't currently update
|
|
# see issue #2214 for rationale for each of these
|
|
- dependency-name: '@xmldom/xmldom'
|
|
versions: [ '>=0.9.0' ]
|
|
- dependency-name: 'bootstrap'
|
|
versions: [ '>=5.0.0' ]
|
|
- dependency-name: 'eslint'
|
|
versions: [ '>=10.0.0' ]
|
|
- dependency-name: 'eslint-plugin-jsdoc'
|
|
versions: [ '>=51.0.0' ]
|
|
- dependency-name: 'fernet'
|
|
versions: [ '>=0.4.0' ]
|
|
- dependency-name: 'geodesy'
|
|
versions: [ '>=2.0.0' ]
|
|
- dependency-name: 'jimp'
|
|
versions: [ '1.6.1' ]
|
|
- dependency-name: 'jq-web'
|
|
versions: [ '>=0.6.0' ]
|
|
groups:
|
|
#
|
|
# Grouping so patch version updates are batched together in a single PR
|
|
# and similarly with minor version updates
|
|
#
|
|
patch-updates:
|
|
applies-to: version-updates
|
|
patterns:
|
|
- '*'
|
|
update-types:
|
|
- 'patch'
|
|
minor-updates:
|
|
applies-to: version-updates
|
|
patterns:
|
|
- '*'
|
|
update-types:
|
|
- 'minor'
|
|
|
|
# Versioning on Github Actions
|
|
- package-ecosystem: "github-actions"
|
|
# Workflow files stored in the default location of `.github/workflows`; no need to
|
|
# specify `/.github/workflows` for `directory`
|
|
directory: '/'
|
|
schedule:
|
|
interval: 'weekly'
|
|
day: 'friday'
|
|
time: '03:00'
|
|
timezone: Europe/London
|
|
cooldown:
|
|
default-days: 4
|
|
commit-message:
|
|
prefix: 'chore (deps): '
|
|
groups:
|
|
actions-dependencies:
|
|
patterns:
|
|
- "*"
|
|
|
|
- package-ecosystem: docker
|
|
directory: /
|
|
schedule:
|
|
interval: 'weekly'
|
|
day: 'friday'
|
|
time: '03:00'
|
|
timezone: Europe/London
|
|
cooldown:
|
|
default-days: 4
|
|
commit-message:
|
|
prefix: 'chore (deps): '
|
|
groups:
|
|
docker-dependencies:
|
|
patterns:
|
|
- "*"
|