Refs #169. Pin and verify pristine distribution assets, upgrade to 1.15.2, and add tested maintainer tooling plus desktop and touch browser checks.
61 lines
1.5 KiB
YAML
61 lines
1.5 KiB
YAML
version: 2
|
|
|
|
updates:
|
|
# Python dependencies (requirements.txt / setup.cfg / pyproject.toml)
|
|
- package-ecosystem: "pip"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "sunday"
|
|
time: "06:00"
|
|
timezone: "America/Los_Angeles"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- "dependencies"
|
|
- "security"
|
|
commit-message:
|
|
prefix: "deps(pip)"
|
|
include: "scope"
|
|
rebase-strategy: "auto"
|
|
# Optional: group non-breaking updates to reduce PR noise
|
|
groups:
|
|
python-minor-and-patch:
|
|
applies-to: "version-updates"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
|
|
# GitHub Actions workflow dependencies
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "sunday"
|
|
time: "06:15"
|
|
timezone: "America/Los_Angeles"
|
|
open-pull-requests-limit: 10
|
|
labels:
|
|
- "dependencies"
|
|
commit-message:
|
|
prefix: "deps(actions)"
|
|
include: "scope"
|
|
rebase-strategy: "auto"
|
|
groups:
|
|
actions-minor-and-patch:
|
|
applies-to: "version-updates"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
|
|
# Maintainer browser test dependencies; Viewer.js itself has an asset-aware updater.
|
|
- package-ecosystem: "npm"
|
|
directory: "/tools/vendor"
|
|
schedule:
|
|
interval: "weekly"
|
|
allow:
|
|
- dependency-name: "@playwright/test"
|
|
labels:
|
|
- "dependencies"
|
|
commit-message:
|
|
prefix: "deps(vendor-tools)"
|