From bd105eae404455e8775d283f52d687d04d549a3b Mon Sep 17 00:00:00 2001 From: Matt Barker Date: Fri, 7 Aug 2026 18:49:03 +1000 Subject: [PATCH] Add Dependabot config for npm (root + all lerna packages) and github-actions Weekly checks against the Artifactory npm registry for the root package and each of the five packages/* workspaces, with minor/patch grouped into a single PR per package. TypeScript majors are excluded since they require coordinated upgrades. APPS-8450 --- .github/dependabot.yml | 140 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 140 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..0b394d3a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,140 @@ +version: 2 + +registries: + npm-artifactory: + type: npm-registry + url: https://zdrepo.jfrog.io/zdrepo/api/npm/npm + username: ${{ secrets.ARTIFACTORY_USERNAME }} + password: ${{ secrets.ARTIFACTORY_API_KEY }} + +updates: + - package-ecosystem: npm + directory: / + registries: + - npm-artifactory + schedule: + interval: weekly + versioning-strategy: increase-if-necessary + commit-message: + prefix: deps + include: scope + open-pull-requests-limit: 10 + ignore: + - dependency-name: "typescript" + update-types: + - "version-update:semver-major" + groups: + minor-and-patch-updates: + patterns: ["*"] + update-types: ["minor", "patch"] + + - package-ecosystem: npm + directory: /packages/zcli + registries: + - npm-artifactory + schedule: + interval: weekly + versioning-strategy: increase-if-necessary + commit-message: + prefix: deps + include: scope + open-pull-requests-limit: 10 + ignore: + - dependency-name: "typescript" + update-types: + - "version-update:semver-major" + groups: + minor-and-patch-updates: + patterns: ["*"] + update-types: ["minor", "patch"] + + - package-ecosystem: npm + directory: /packages/zcli-apps + registries: + - npm-artifactory + schedule: + interval: weekly + versioning-strategy: increase-if-necessary + commit-message: + prefix: deps + include: scope + open-pull-requests-limit: 10 + ignore: + - dependency-name: "typescript" + update-types: + - "version-update:semver-major" + groups: + minor-and-patch-updates: + patterns: ["*"] + update-types: ["minor", "patch"] + + - package-ecosystem: npm + directory: /packages/zcli-connectors + registries: + - npm-artifactory + schedule: + interval: weekly + versioning-strategy: increase-if-necessary + commit-message: + prefix: deps + include: scope + open-pull-requests-limit: 10 + ignore: + - dependency-name: "typescript" + update-types: + - "version-update:semver-major" + groups: + minor-and-patch-updates: + patterns: ["*"] + update-types: ["minor", "patch"] + + - package-ecosystem: npm + directory: /packages/zcli-core + registries: + - npm-artifactory + schedule: + interval: weekly + versioning-strategy: increase-if-necessary + commit-message: + prefix: deps + include: scope + open-pull-requests-limit: 10 + ignore: + - dependency-name: "typescript" + update-types: + - "version-update:semver-major" + groups: + minor-and-patch-updates: + patterns: ["*"] + update-types: ["minor", "patch"] + + - package-ecosystem: npm + directory: /packages/zcli-themes + registries: + - npm-artifactory + schedule: + interval: weekly + versioning-strategy: increase-if-necessary + commit-message: + prefix: deps + include: scope + open-pull-requests-limit: 10 + ignore: + - dependency-name: "typescript" + update-types: + - "version-update:semver-major" + groups: + minor-and-patch-updates: + patterns: ["*"] + update-types: ["minor", "patch"] + + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + commit-message: + prefix: deps + groups: + all-actions: + patterns: + - "*"