Commit graph

10 commits

Author SHA1 Message Date
Martin Pitt
a9f076c681 dependabot: Don't update major React version
PatternFly 5 has a React 18 peer dependency, so they need to be updated
together.
2024-12-06 09:32:03 +01:00
Martin Pitt
3fe8b6766e dependabot: Ignore 1.8x versions as well
sass is at 1.81.0 now, which we also don't want -- we want to stay on
1.79.x for the time being.
2024-11-17 17:40:03 +01:00
Martin Pitt
5b211b27a8 dependabot: Fix PatternFly update-types
Commit 52184d910f was ineffective due to `update-types` not having a
correct value. See
https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#specifying-dependencies-and-versions-to-ignore

Closes #1020
2024-10-28 09:18:55 +01:00
Martin Pitt
52184d910f dependabot: Keep PatternFly at current major version
Major PF updates always need to be done in Cockpit first, due to all the
overrides and lib.

Closes #1018
2024-10-25 08:51:20 +02:00
Martin Pitt
6cc062f76f dependabot: Keep sass at < 1.80
sass 1.80 (and 2.x) introduces tons of "@import rules are deprecated".
These are unfixable on our side due to PatternFly using them
extensively.

We don't need any new sass features, so stick to 1.79.x. Explicitly not
ignore 3.x (which will drop @import) to get a reminder in the future to
try and clean this up again.

Same as https://github.com/cockpit-project/cockpit/pull/21155

Closes #1017
2024-10-25 08:51:20 +02:00
Martin Pitt
888ea5a229 dependabot: Group React and types packages
Also sort the list alphabetically.
2024-04-27 12:01:36 +02:00
Jelle van der Waa
5966bc24be .github: don't run integration tests on actions changes 2024-02-09 09:23:59 +01:00
Jelle van der Waa
bf4889042a github: allow dependeabot to update github workflow actions
Github usually updates their actions once a while and then warns about a
node env getting deprecated in runs. Which is not super easily spotted
by a developer until it's too late, so let's like npm let dependabot
handle updating.
2024-02-07 19:00:16 +01:00
Martin Pitt
bb4c60ee3a dependabot: Run in our evenings, reduce limit
So far the daily updates tend to run in our mornings between 7:00 and
8:00, which blocks our CI for a long time, and thus collides with
developers sending PRs. Move them to the evening instead, when they can
use the quiet bots time.

Also reduce the number of parallel PRs from 5 to 3. Parallel ones always
need to be rebased, and thus are very expensive. We still want to be
able to have a complicated PatternFly PR open for several days without
blocking other updates.
2023-10-11 12:17:34 +02:00
Katerina Koukiou
558703a24b github: replace npm-update workflow with dependabot
https://docs.github.com/en/code-security/dependabot/working-with-dependabot
2023-09-15 16:36:11 +02:00