mirror of
https://github.com/suitenumerique/meet.git
synced 2026-10-03 12:30:21 +00:00
lebaudantoine
6c371c8cb3
First iteration of a migration toward a centralized repository containing our shared CI logic. Goals: * Manage GitHub Actions version upgrades in one place. * Make it easier to audit what actually runs in CI from a security perspective. * Avoid duplicating CI logic across projects and having each repository slowly diverge over time. * Centralize as many of our custom GitHub Actions as possible, including some that still live in the old `numerique-gouv` organization. * Centralize the Renovate configuration alongside the workflows. Inspired by the Accounts project, which recently simplified and reorganized its CI setup. This PR starts moving meet's CI to the shared repository so we can validate the approach on a real project. For now, reusable workflows are pinned to `main`; once we agree on the structure and content of the central repository, they should be pinned to a specific commit SHA instead.
55 lines
1.6 KiB
JSON
55 lines
1.6 KiB
JSON
{
|
|
"extends": ["github>suitenumerique/ci//renovate/default"],
|
|
"dependencyDashboard": true,
|
|
"labels": ["dependencies", "noChangeLog"],
|
|
"packageRules": [
|
|
{
|
|
"groupName": "js dependencies",
|
|
"matchManagers": ["npm"],
|
|
"schedule": ["on the first day of the month"],
|
|
"matchPackagePatterns": ["*"],
|
|
"minimumReleaseAge": "7 days",
|
|
"internalChecksFilter": "strict"
|
|
},
|
|
{
|
|
"groupName": "python dependencies",
|
|
"matchManagers": ["setup-cfg", "pep621"],
|
|
"schedule": ["on the first day of the month"],
|
|
"matchPackagePatterns": ["*"],
|
|
"minimumReleaseAge": "7 days"
|
|
},
|
|
{
|
|
"enabled": false,
|
|
"groupName": "ignored python dependencies",
|
|
"matchManagers": ["pep621"],
|
|
"matchPackageNames": ["redis"]
|
|
},
|
|
{
|
|
"groupName": "allowed pylint versions",
|
|
"matchManagers": ["pep621"],
|
|
"matchPackageNames": ["pylint"],
|
|
"allowedVersions": "<4.0.0"
|
|
},
|
|
{
|
|
"groupName": "allowed django versions",
|
|
"matchManagers": ["pep621"],
|
|
"matchPackageNames": ["django"],
|
|
"allowedVersions": "<6.0.0"
|
|
},
|
|
{
|
|
"groupName": "allowed brevo versions",
|
|
"matchManagers": ["pep621"],
|
|
"matchPackageNames": ["brevo-python"],
|
|
"allowedVersions": "<3.0.0"
|
|
},
|
|
{
|
|
"enabled": false,
|
|
"groupName": "ignored js dependencies",
|
|
"matchManagers": ["npm"],
|
|
"matchPackageNames": [
|
|
"eslint", "react", "react-dom", "@types/react-dom", "@types/react", "react-i18next"
|
|
]
|
|
}
|
|
]
|
|
}
|