.github/dependabot.yml - main - githubmirror/serverless

.github/dependabot.yml
134 строки4 KB
Tomasz Czubocha
chore(deps): bump glob from 10.5.0 to 13.0.6 (#13766)
31 июл 2026, 05:23
31 июл 2026, 05:237cf18ee
# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file

version: 2
updates:
  # Maintain NPM dependencies across the workspace and the standalone packages
  # (framework-dist, sf-core-installer) that are excluded from the workspace.
  # Using `directories` keeps version bumps in sync across all manifests.
  - package-ecosystem: 'npm'
    directories:
      - '/'
      - '/packages/framework-dist'
      - '/packages/sf-core-installer'
    schedule:
      interval: 'weekly'
    versioning-strategy: increase
    cooldown:
      default-days: 5
      semver-major-days: 30
      semver-minor-days: 7
      semver-patch-days: 3
    groups:
      aws-sdk:
        patterns:
          - '@aws-sdk/*'
          - '@smithy/*'
          - 'aws-sdk-v3-proxy'
          - 'aws-iot-device-sdk'
      dev-dependencies:
        patterns:
          - '*'
        dependency-type: 'development'
        update-types:
          - 'minor'
          - 'patch'
      patch-updates:
        patterns:
          - '*'
        update-types:
          - 'patch'
    ignore:
      - dependency-name: 'ora'
        # ora v9 drops support for Node.js 18
        versions: ['>= 9.0.0']
      - dependency-name: 'open'
        # open v11 drops support for Node.js 18
        versions: ['>= 11.0.0']
      - dependency-name: 'p-limit'
        # p-limit v7 drops support for Node.js 18
        versions: ['>= 7.0.0']
      - dependency-name: 'joi'
        # joi v18 drops support for Node.js 18
        versions: ['>= 18.0.0']
      - dependency-name: 'is-docker'
        # is-docker v4 drops support for Node.js 18
        versions: ['>= 4.0.0']
      - dependency-name: 'eventsource'
        # eventsource v4 drops support for Node.js 18
        versions: ['>= 4.0.0']
      - dependency-name: '@octokit/rest'
        # @octokit/rest v22 drops support for Node.js 18
        versions: ['>= 22.0.0']
      - dependency-name: 'yargs'
        # yargs v18 drops support for Node.js 18
        versions: ['>= 18.0.0']
      - dependency-name: 'undici'
        # undici v7 drops support for Node.js 18
        versions: ['>= 7.0.0']
      - dependency-name: 'terminal-link'
        # terminal-link v5 drops support for Node.js 18
        versions: ['>= 5.0.0']
      - dependency-name: 'globby'
        # globby v15 drops support for Node.js 18
        versions: ['>= 15.0.0']
      - dependency-name: 'chokidar'
        # chokidar v5 drops support for Node.js 18
        versions: ['>= 5.0.0']
      - dependency-name: '@axiomhq/js'
        # @axiomhq/js v1.4.0 drops support for Node.js 18
        versions: ['>= 1.4.0']
      - dependency-name: 'get-stdin'
        # get-stdin v10 drops support for Node.js 18
        versions: ['>= 10.0.0']
      - dependency-name: 'uuid'
        # uuid v14 drops support for Node.js 18
        versions: ['>= 14.0.0']
      - dependency-name: 'rimraf'
        # rimraf v6 drops support for Node.js 18
        versions: ['>= 6.0.0']
      - dependency-name: 'toml'
        # toml v4 drops support for Node.js 18
        versions: ['>= 4.0.0']
      - dependency-name: 'https-proxy-agent'
        # https-proxy-agent v9 (and agent-base v9) drop support for Node.js 18
        versions: ['>= 9.0.0']
      - dependency-name: 'graphql'
        # graphql v17 drops support for Node.js 18 and 20
        versions: ['>= 17.0.0']

  # Maintain Go dependencies
  - package-ecosystem: 'gomod'
    directory: '/binary-installer'
    schedule:
      interval: 'weekly'
    cooldown:
      default-days: 5
      semver-major-days: 30
      semver-minor-days: 7
      semver-patch-days: 3

  # Maintain Maven dependencies for Java runtime wrapper
  - package-ecosystem: 'maven'
    directory: '/packages/serverless/lib/plugins/aws/invoke-local/runtime-wrappers/java'
    schedule:
      interval: 'weekly'
    cooldown:
      default-days: 5
      semver-major-days: 30
      semver-minor-days: 7
      semver-patch-days: 3

  # Maintain GitHub Actions
  - package-ecosystem: 'github-actions'
    directory: '/'
    schedule:
      interval: 'weekly'
    cooldown:
      default-days: 5
    groups:
      actions:
        patterns:
          - '*'