diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bb57f6c..b0e720d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -2,11 +2,152 @@ # package ecosystems to update and where the package manifests are located. # Please see the documentation for all configuration options: # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file +# Real-life Ref File: +# https://github.com/dependabot/dependabot-core/blob/main/.github/dependabot.yml version: 2 updates: - - package-ecosystem: "npm, cargo, composer, docker, github-actions, gomod, maven, npm, nuget, pip, " # See documentation for possible values - directory: "/" # Location of package manifests + - package-ecosystem: "bundler" + directories: + - "/updater" + - "/" schedule: interval: "weekly" - + day: "sunday" + time: "16:00" + groups: + sorbet: + patterns: + - "*-sorbet" + - "sorbet-*" + - "sorbet" + - "tapioca" + aws-sdk: + patterns: + - "aws-sdk-*" + prod-dependencies: + dependency-type: "production" + update-types: + - "minor" + - "patch" + dev-dependencies: + dependency-type: "development" + update-types: + - "minor" + - "patch" + + # Watch the per-ecosystem native helpers + - package-ecosystem: "composer" + directories: + - "/composer/helpers/v1" + - "/composer/helpers/v2" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + groups: + prod-dependencies: + dependency-type: "production" + update-types: + - "minor" + - "patch" + dev-dependencies: + dependency-type: "development" + update-types: + - "minor" + - "patch" + - package-ecosystem: "devcontainers" + directory: "/" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "docker" + directories: + - "/" + - "/go_modules" + - "/cargo" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + groups: + all-actions: + patterns: [ "*" ] + - package-ecosystem: "gomod" + directory: "/go_modules/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "mix" + directory: "/hex/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + - package-ecosystem: "npm" + directory: "/npm_and_yarn/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + groups: + npm-dependencies: + patterns: + - "@npmcli/arborist" + - "nock" + - "npm" + - "semver" + exclude-patterns: + - "detect-indent" # temp excluded due to https://github.com/dependabot/dependabot-core/pull/5683#issuecomment-1243468605 + yarn-dependencies: + patterns: + - "@dependabot/yarn-lib" + pnpm-dependencies: + patterns: + - "@pnpm/lockfile-file" + - "@pnpm/dependency-path" + dev-dependencies: + dependency-type: "development" + update-types: + - "minor" + - "patch" + ignore: + - dependency-name: "npm" + update-types: [ "version-update:semver-major" ] + - package-ecosystem: "pip" + directory: "/python/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" + groups: + common: + patterns: + - pip + - cython + - flake8 + poetry: + patterns: + - poetry + - hashin + pip-tools: + patterns: + - pip-tools + pipenv: + patterns: + - pipfile + - pipenv + - package-ecosystem: "pub" + directory: "/pub/helpers" + schedule: + interval: "weekly" + day: "sunday" + time: "16:00" diff --git a/benchmark-set/package-lock.json b/benchmark-set/package-lock.json index 1c4df7a..3de01d0 100644 --- a/benchmark-set/package-lock.json +++ b/benchmark-set/package-lock.json @@ -4666,11 +4666,10 @@ "license": "MIT" }, "node_modules/cookie": { - "version": "0.6.0", - "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.6.0.tgz", - "integrity": "sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==", + "version": "0.7.1", + "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz", + "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==", "dev": true, - "license": "MIT", "engines": { "node": ">= 0.6" } @@ -6408,9 +6407,9 @@ } }, "node_modules/express": { - "version": "4.21.0", - "resolved": "https://registry.npmjs.org/express/-/express-4.21.0.tgz", - "integrity": "sha512-VqcNGcj/Id5ZT1LZ/cfihi3ttTn+NJmkli2eZADigjq29qTlWi/hAQ43t/VLPq8+UX06FCEx3ByOYet6ZFblng==", + "version": "4.21.1", + "resolved": "https://registry.npmjs.org/express/-/express-4.21.1.tgz", + "integrity": "sha512-YSFlK1Ee0/GC8QaO91tHcDxJiE/X4FbpAyQWkxAvG6AXCuR65YzK8ua6D9hvi/TzUfZMpc+BwuM1IPw8fmQBiQ==", "dev": true, "dependencies": { "accepts": "~1.3.8", @@ -6418,7 +6417,7 @@ "body-parser": "1.20.3", "content-disposition": "0.5.4", "content-type": "~1.0.4", - "cookie": "0.6.0", + "cookie": "0.7.1", "cookie-signature": "1.0.6", "debug": "2.6.9", "depd": "2.0.0",