Commit graph

6 commits

Author SHA1 Message Date
Martin Pitt
6cc062f76f dependabot: Keep sass at < 1.80
sass 1.80 (and 2.x) introduces tons of "@import rules are deprecated".
These are unfixable on our side due to PatternFly using them
extensively.

We don't need any new sass features, so stick to 1.79.x. Explicitly not
ignore 3.x (which will drop @import) to get a reminder in the future to
try and clean this up again.

Same as https://github.com/cockpit-project/cockpit/pull/21155

Closes #1017
2024-10-25 08:51:20 +02:00
Martin Pitt
888ea5a229 dependabot: Group React and types packages
Also sort the list alphabetically.
2024-04-27 12:01:36 +02:00
Jelle van der Waa
5966bc24be .github: don't run integration tests on actions changes 2024-02-09 09:23:59 +01:00
Jelle van der Waa
bf4889042a github: allow dependeabot to update github workflow actions
Github usually updates their actions once a while and then warns about a
node env getting deprecated in runs. Which is not super easily spotted
by a developer until it's too late, so let's like npm let dependabot
handle updating.
2024-02-07 19:00:16 +01:00
Martin Pitt
bb4c60ee3a dependabot: Run in our evenings, reduce limit
So far the daily updates tend to run in our mornings between 7:00 and
8:00, which blocks our CI for a long time, and thus collides with
developers sending PRs. Move them to the evening instead, when they can
use the quiet bots time.

Also reduce the number of parallel PRs from 5 to 3. Parallel ones always
need to be rebased, and thus are very expensive. We still want to be
able to have a complicated PatternFly PR open for several days without
blocking other updates.
2023-10-11 12:17:34 +02:00
Katerina Koukiou
558703a24b github: replace npm-update workflow with dependabot
https://docs.github.com/en/code-security/dependabot/working-with-dependabot
2023-09-15 16:36:11 +02:00