From 558703a24bb3620971f5b610961d6420f7a79677 Mon Sep 17 00:00:00 2001
From: Katerina Koukiou <kkoukiou@redhat.com>
Date: Thu, 10 Feb 2022 15:36:09 +0100
Subject: [PATCH] github: replace npm-update workflow with dependabot

https://docs.github.com/en/code-security/dependabot/working-with-dependabot
---
 .github/dependabot.yml              | 19 ++++++++++++++++++
 .github/workflows/npm-update-pf.yml | 30 -----------------------------
 .github/workflows/npm-update.yml    | 30 -----------------------------
 3 files changed, 19 insertions(+), 60 deletions(-)
 create mode 100644 .github/dependabot.yml
 delete mode 100644 .github/workflows/npm-update-pf.yml
 delete mode 100644 .github/workflows/npm-update.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..e216947
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    groups:
+      eslint:
+        patterns:
+          - "eslint*"
+      esbuild:
+        patterns:
+          - "esbuild*"
+      stylelint:
+        patterns:
+          - "stylelint*"
+      patternfly:
+        patterns:
+          - "@patternfly*"
diff --git a/.github/workflows/npm-update-pf.yml b/.github/workflows/npm-update-pf.yml
deleted file mode 100644
index e07f20f..0000000
--- a/.github/workflows/npm-update-pf.yml
+++ /dev/null
@@ -1,30 +0,0 @@
-name: npm-update-pf
-on:
-  schedule:
-    - cron: '0 2 * * 1'
-  # can be run manually on https://github.com/cockpit-project/starter-kit/actions
-  workflow_dispatch:
-jobs:
-  npm-update:
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-      contents: write
-    steps:
-      - name: Set up dependencies
-        run: |
-          sudo apt update
-          sudo apt install -y npm make
-
-      - name: Set up configuration and secrets
-        run: |
-          printf '[user]\n\tname = Cockpit Project\n\temail=cockpituous@gmail.com\n' > ~/.gitconfig
-          echo '${{ secrets.GITHUB_TOKEN }}' > ~/.config/github-token
-
-      - name: Clone repository
-        uses: actions/checkout@v3
-
-      - name: Run npm-update bot
-        run: |
-          make bots
-          bots/npm-update @patternfly
diff --git a/.github/workflows/npm-update.yml b/.github/workflows/npm-update.yml
deleted file mode 100644
index 4b06dee..0000000
--- a/.github/workflows/npm-update.yml
+++ /dev/null
@@ -1,30 +0,0 @@
-name: npm-update
-on:
-  schedule:
-    - cron: '0 2 * * 2,4,6'
-  # can be run manually on https://github.com/cockpit-project/starter-kit/actions
-  workflow_dispatch:
-jobs:
-  npm-update:
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-      contents: write
-    steps:
-      - name: Set up dependencies
-        run: |
-          sudo apt update
-          sudo apt install -y npm make
-
-      - name: Set up configuration and secrets
-        run: |
-          printf '[user]\n\tname = Cockpit Project\n\temail=cockpituous@gmail.com\n' > ~/.gitconfig
-          echo '${{ secrets.GITHUB_TOKEN }}' > ~/.config/github-token
-
-      - name: Clone repository
-        uses: actions/checkout@v3
-
-      - name: Run npm-update bot
-        run: |
-          make bots
-          bots/npm-update ~@patternfly