mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-24 04:32:32 +00:00
Oliver Kieselbach
68 lines
1.9 KiB
YAML
68 lines
1.9 KiB
YAML
version: 2
|
|
|
|
# Grouping: every ecosystem gets one batched PR for minor/patch version
|
|
# updates and one batched PR for security updates. Groups apply to version
|
|
# updates only by default, so the security-updates groups are declared
|
|
# explicitly — otherwise every advisory lands as its own PR.
|
|
|
|
updates:
|
|
- package-ecosystem: nuget
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 5
|
|
groups:
|
|
dotnet:
|
|
patterns: ['*']
|
|
update-types: [minor, patch]
|
|
dotnet-security:
|
|
applies-to: security-updates
|
|
patterns: ['*']
|
|
|
|
- package-ecosystem: npm
|
|
directory: /src/Web/autopilot-monitor-web
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 5
|
|
groups:
|
|
web:
|
|
patterns: ['*']
|
|
update-types: [minor, patch]
|
|
web-security:
|
|
applies-to: security-updates
|
|
patterns: ['*']
|
|
# Major bumps are breaking and reviewed deliberately, not auto-PR'd.
|
|
# Security updates ignore this filter, so the Security tab stays clean.
|
|
ignore:
|
|
- dependency-name: '*'
|
|
update-types: ['version-update:semver-major']
|
|
|
|
- package-ecosystem: npm
|
|
directory: /src/McpServer/autopilot-monitor-mcp
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 5
|
|
groups:
|
|
mcp:
|
|
patterns: ['*']
|
|
update-types: [minor, patch]
|
|
mcp-security:
|
|
applies-to: security-updates
|
|
patterns: ['*']
|
|
# Major bumps are breaking and reviewed deliberately, not auto-PR'd.
|
|
# Security updates ignore this filter, so the Security tab stays clean.
|
|
ignore:
|
|
- dependency-name: '*'
|
|
update-types: ['version-update:semver-major']
|
|
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
schedule:
|
|
interval: monthly
|
|
groups:
|
|
actions:
|
|
patterns: ['*']
|
|
actions-security:
|
|
applies-to: security-updates
|
|
patterns: ['*']
|