diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 9aa8c837..00000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,26 +0,0 @@ -# Please see the documentation for all configuration options: -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file - -version: 2 -updates: - - package-ecosystem: "pip" - directory: "/" - labels: - - "bot" - - "dependabot" - - "dependencies" - - "skip:test:long_running" - schedule: - interval: "cron" - cronjob: "0 1 * * 1-5" - - package-ecosystem: "github-actions" - directory: "/" - labels: - - "bot" - - "dependabot" - - "dependencies" - - "skip:test:long_running" - - "skip:codecov" - schedule: - interval: "cron" - cronjob: "0 1 * * 1-5" diff --git a/renovate.json b/renovate.json index db6b2bfc..3f0191ef 100644 --- a/renovate.json +++ b/renovate.json @@ -4,7 +4,7 @@ "config:recommended" ], "timezone": "Europe/Berlin", - "schedule": "before 2am every weekday", + "schedule": ["at any time"], "labels": [ "bot", "renovate", @@ -12,7 +12,21 @@ "skip:test:long_running", "skip:codecov" ], - "ignorePaths": [ - "plugins/manifest/package.json" + "enabledManagers": ["pep621", "github-actions"], + "lockFileMaintenance": { + "enabled": true, + "schedule": ["before 5am on monday"] + }, + "packageRules": [ + { + "groupName": "minor and patch dependencies", + "matchManagers": ["pep621"], + "matchUpdateTypes": ["minor", "patch"] + }, + { + "groupName": "GitHub Actions", + "matchManagers": ["github-actions"], + "separateMajorMinor": false + } ] } \ No newline at end of file diff --git a/specifications/SPEC-BUILD-CHAIN-CICD-SERVICE.md b/specifications/SPEC-BUILD-CHAIN-CICD-SERVICE.md index 293e6a0d..9cdc601e 100644 --- a/specifications/SPEC-BUILD-CHAIN-CICD-SERVICE.md +++ b/specifications/SPEC-BUILD-CHAIN-CICD-SERVICE.md @@ -61,8 +61,7 @@ The Build Chain and CI/CD Module shall: │ ├── _docker-publish.yml # Container image publishing │ ├── _codeql.yml # GitHub CodeQL security analysis │ └── _ketryx_report_and_check.yml # Compliance reporting -├── copilot-instructions.md # AI pair programming guidelines -└── dependabot.yml # Automated dependency updates +└── copilot-instructions.md # AI pair programming guidelines Makefile # Local development task orchestration noxfile.py # Python environment management and task automation