mirror of
https://github.com/max-sixty/worktrunk.git
synced 2026-09-14 20:00:38 +08:00
7e43837527
Dependabot only scanned workflow action references, so setup-uv in the Tend composite setup action lagged behind. This aligns setup-uv at v10.1.0 and extends the existing daily GitHub Actions update to every composite action directory. > _This was written by Codex on behalf of @max-sixty_
48 lines
1.3 KiB
YAML
48 lines
1.3 KiB
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: cargo
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
commit-message:
|
|
prefix: "chore: "
|
|
# Bump all patch versions of rust dependencies as a single PR
|
|
groups:
|
|
patch:
|
|
update-types:
|
|
- patch
|
|
# Exclude labels due to https://github.com/dependabot/dependabot-core/issues/7645#issuecomment-1986212847
|
|
labels: []
|
|
|
|
- package-ecosystem: "github-actions"
|
|
directories:
|
|
- "/"
|
|
- "/.github/actions/*"
|
|
commit-message:
|
|
prefix: "chore: "
|
|
schedule:
|
|
interval: daily
|
|
labels: []
|
|
|
|
- package-ecosystem: npm
|
|
directory: "/docs"
|
|
schedule:
|
|
interval: weekly
|
|
commit-message:
|
|
prefix: "chore: "
|
|
groups:
|
|
docs-site:
|
|
patterns:
|
|
- "*"
|
|
ignore:
|
|
# `@astrojs/check` declares `peer typescript@"^5.0.0 || ^6.0.0"`, so a
|
|
# TypeScript 7 lockfile makes `npm ci` fail ERESOLVE and takes the docs
|
|
# build down. This blocks every future major, not just 7 — drop it once
|
|
# `@astrojs/check`'s peer range covers the current `typescript` major.
|
|
# The weekly pin-bump pass owns that check; see
|
|
# `.claude/skills/running-tend/SKILL.md`.
|
|
- dependency-name: "typescript"
|
|
update-types:
|
|
- version-update:semver-major
|
|
labels: []
|