- Upgraded various dependencies across the project, including NestJS packages, Prisma client, and TypeScript for improved performance and features. - Added new script commands for security audits and checks in package.json. - Enhanced pnpm workspace configuration to include only built dependencies for better management. - Refactored test cases to improve type handling and ensure compatibility with updated dependencies. - Cleaned up package.json files across applications to maintain consistency and clarity in dependency management.
127 lines
3.0 KiB
YAML
127 lines
3.0 KiB
YAML
# Dependabot configuration for automated dependency updates
|
|
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates
|
|
|
|
version: 2
|
|
updates:
|
|
# NPM dependencies for the monorepo
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
time: "09:00"
|
|
timezone: "UTC"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- "dependencies"
|
|
- "automated"
|
|
commit-message:
|
|
prefix: "chore(deps):"
|
|
groups:
|
|
# Group NestJS packages together
|
|
nestjs:
|
|
patterns:
|
|
- "@nestjs/*"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
# Group React/Next.js packages together
|
|
react-next:
|
|
patterns:
|
|
- "react"
|
|
- "react-dom"
|
|
- "next"
|
|
- "@next/*"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
# Group TypeScript tooling
|
|
typescript-tooling:
|
|
patterns:
|
|
- "typescript"
|
|
- "typescript-eslint"
|
|
- "@types/*"
|
|
- "ts-*"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
# Group testing packages
|
|
testing:
|
|
patterns:
|
|
- "jest"
|
|
- "@jest/*"
|
|
- "supertest"
|
|
- "@types/jest"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
# Group linting/formatting
|
|
linting:
|
|
patterns:
|
|
- "eslint"
|
|
- "eslint-*"
|
|
- "@eslint/*"
|
|
- "prettier"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
# Group Tailwind CSS
|
|
tailwind:
|
|
patterns:
|
|
- "tailwindcss"
|
|
- "@tailwindcss/*"
|
|
- "tailwind-*"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
# Group Prisma
|
|
prisma:
|
|
patterns:
|
|
- "prisma"
|
|
- "@prisma/*"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
ignore:
|
|
# Ignore major version updates for critical packages (review manually)
|
|
- dependency-name: "next"
|
|
update-types: ["version-update:semver-major"]
|
|
- dependency-name: "react"
|
|
update-types: ["version-update:semver-major"]
|
|
- dependency-name: "react-dom"
|
|
update-types: ["version-update:semver-major"]
|
|
- dependency-name: "@prisma/client"
|
|
update-types: ["version-update:semver-major"]
|
|
- dependency-name: "prisma"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
# Docker base images
|
|
- package-ecosystem: "docker"
|
|
directory: "/apps/portal"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
labels:
|
|
- "dependencies"
|
|
- "docker"
|
|
|
|
- package-ecosystem: "docker"
|
|
directory: "/apps/bff"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
labels:
|
|
- "dependencies"
|
|
- "docker"
|
|
|
|
# GitHub Actions
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
labels:
|
|
- "dependencies"
|
|
- "github-actions"
|
|
|