eac3c92b71
fix(vulnerability-alerts): pypi allowedVersions syntax
2019-05-19 07:18:10 +02:00
31bd24869d
fix(vulnerability-alerts): maven matchCurrentVersion syntax
2019-05-19 07:12:40 +02:00
6d86bbd353
fix(vulnerability-alerts): use datasources, not managers
2019-05-19 07:08:31 +02:00
8f6e124998
fix(semantic-commits): fix lazy git semantic commit detection ( #3735 )
2019-05-17 10:24:29 +02:00
3215d2966a
feat(gitFs): lazy fetching ( #3638 )
...
Instead of shallow cloning every branch (using —no-single-branch), we now clone only the default branch and lazy fetch the others as needed.
2019-05-17 08:10:40 +02:00
ee4a5f15ab
logs: ignorePaths
2019-05-02 23:48:54 +02:00
8e195cef03
feat: Add JSON5 parser ( #3555 )
...
Added support for `renovate.json5` filename. Now configuration can be parsed from a `json5` format file.
Closes #3484
2019-04-19 08:39:20 +02:00
ca66b34aaa
fix(github): handle no firstPatchedVersion
2019-03-11 11:45:41 +01:00
9ea64f42da
refactor(github): hardcode vulnerability branchTopic
2019-03-10 08:46:46 +01:00
9cd81a0b6d
feat(github): include vulnerability descriptions
2019-03-10 08:40:28 +01:00
65e5b957e9
fix(github): combine vulnerability alerts
2019-03-10 07:20:44 +01:00
63daf6ef89
refactor: vulnerability manager mapping
2019-03-10 05:20:41 +01:00
eb5ccffdcd
fix: update GitHub vulnerability alerts parsing
...
Closes #3340
2019-03-09 07:16:12 +01:00
e8a487a90f
refactor: drop mirrorMode
2019-01-23 00:05:56 +01:00
55257fff26
feat: centralise app strings ( #3032 )
2019-01-06 14:47:42 +01:00
e19294e894
feat: centralise config file list ( #3031 )
2019-01-06 06:03:26 +01:00
4b38793471
refactor: trustLevel
2019-01-05 09:16:32 +01:00
a69376ab46
feat: printConfig
...
Adds an option to print the full, resolved config for a repo at INFO level. e.g.
renovate —print-config owner/repo
Closes https://github.com/renovatebot/config-help/issues/128
2018-12-10 08:53:55 +01:00
8c79536101
feat(config): allow .github/renovate.json
2018-11-22 16:06:02 +01:00
db0efdf053
feat: trustLevel
...
New config option replaces existing option exposeEnv. Set trustLevel=high in the bot config if you trust the contents of the repositories you are renovating. Doing so results in env being exposed, access to localhost, etc.
Closes #2739
2018-11-16 12:16:37 +01:00
81d64bb884
feat: repo mem cache for packagist
2018-10-18 11:06:57 +02:00
6a48c03b3d
fix: massage empty renovate config to {} ( #2663 )
2018-10-17 12:19:34 +02:00
5533d371c5
refactor: delete gitPrivateKey after setting
2018-10-17 06:48:07 +02:00
aabb486129
fix(hostRules): allow to be set in config
2018-10-15 13:35:55 +02:00
50ba8473f7
refactor: lower debug logging
2018-10-15 09:21:57 +02:00
4539487d26
refactor: less logging
2018-09-05 14:18:31 +02:00
a30972f6f6
refactor: info not warn when no fixedIn alert
2018-07-31 07:21:25 +02:00
1da53671b8
feat: vulnerabilityAlertsOnly
...
For use in new app
2018-07-29 09:03:54 +02:00
ac371e2a37
feat(github): vulnerability alerts ( #2321 )
...
Adds rules to skip any configured grouping or schedules that prevent insecure packages from being updated immediately.
If GitHub's vulnerability alerts are detected, package rules are added to force empty schedule and grouping for each affected package. Settings are configurable via new `vulnerabilityAlerts` config object, e.g. so that custom PR titles, labels or assignees can be configured.
Closes #1567
2018-07-29 06:35:25 +02:00
0fa593d5ab
feat: log github vulnerability alerts
2018-07-28 08:47:49 +02:00
ae7aecac95
fix: setNpmrc after resolveConfig
2018-07-06 17:04:40 +02:00
42145e60fc
refactor: log npmrc
2018-07-06 16:56:29 +02:00
d4f2572651
fix: assign config.force after every mergeChildConfig
2018-07-05 18:55:00 +02:00
0144bac228
fix: force config after each package rules apply
2018-07-05 12:37:46 +02:00
d8667619d8
fix(npm): move ignoreNpmrcFile logic out of mirror mode
...
Logic to automatically ignoreNpmrcFile=true when npmrc found was in the wrong location.
2018-07-03 13:51:59 +02:00
7c99089b6a
logs: debug ignoring npmrc files
2018-07-02 20:26:11 +02:00
53b6050017
feat: force, forceCli ( #2145 )
...
Adds config options force and forceCli. These cover the use case where a certain setting is desired to be forced by the bot admin, regardless of repository config, for example removing all configured schedules in order to force PR creation.
Closes #1731
2018-06-21 10:23:59 +02:00
163bad03c9
fix: catch JSON.parse error for renovate config
2018-06-20 19:11:57 +02:00
eb21abf118
feat: flatten nested packageRules after resolving
...
This solves the problem of nested packageRules, such as when a paths-based rule is used to extend a preset that itself includes packageRules.
Closes https://github.com/renovatebot/config-help/issues/58
2018-06-20 14:57:05 +02:00
69b264cf01
fix(npm): don’t read npmrc files if ignoreNpmrcFiles=true
2018-05-13 23:06:27 +02:00
ebe9607d79
fix(npm): npmrc/ignoreNpmrc logic
2018-05-13 22:04:06 +02:00
6f583ab0e6
fix(presets): set npmrc after first decrypt
...
In case the renovate config has a npmrc in it that is used to decrypt a preset.
2018-05-11 15:43:14 +02:00
680a0bc193
fix: don’t fetch .npmrc in initApis
...
It will be fetched if there is a package.json anyway
2018-05-10 21:03:25 +02:00
3989d47f76
fix: re-enable semantic commit detection
2018-05-09 14:38:17 +02:00
407f8fc576
refactor: drop key after decrypt
2018-05-09 13:43:23 +02:00
7189f4682f
refactor: simplify repo init
2018-05-07 06:47:17 +02:00
eb3c55b125
refactor: set token in config before renovation
2018-04-09 06:08:43 +02:00
70ae736988
fix: abort if renovate config returns null
2018-03-28 21:01:38 +02:00
b89f448946
feat: validate packageRule selectors ( #1728 )
...
Validates that each packageRule must contain at least one selector. Resolves the rule first to allow for presets.
Closes #1345 , Closes #1693
2018-03-28 10:04:07 +02:00
39aa1fdf64
fix: pass through migratedConfig warnings
2018-03-28 09:24:54 +02:00
Rhys Arkins