dependabot.yml 5.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243
  1. # SPDX-FileCopyrightText: 2020 Nextcloud GmbH and Nextcloud contributors
  2. # SPDX-License-Identifier: AGPL-3.0-or-later
  3. version: 2
  4. updates:
  5. # Linting and coding style
  6. - package-ecosystem: composer
  7. directory: "/"
  8. schedule:
  9. interval: weekly
  10. day: saturday
  11. time: "03:00"
  12. timezone: Europe/Paris
  13. labels:
  14. - "3. to review"
  15. - "feature: dependencies"
  16. reviewers:
  17. - "nextcloud/server-dependabot"
  18. # cs-fixer
  19. - package-ecosystem: composer
  20. directory: "/vendor-bin/cs-fixer"
  21. schedule:
  22. interval: weekly
  23. day: saturday
  24. time: "04:10"
  25. timezone: Europe/Copenhagen
  26. labels:
  27. - "3. to review"
  28. - "feature: dependencies"
  29. reviewers:
  30. - "nextcloud/server-dependabot"
  31. # openapi-extractor
  32. - package-ecosystem: composer
  33. directory: "/vendor-bin/openapi-extractor"
  34. schedule:
  35. interval: weekly
  36. day: saturday
  37. time: "04:20"
  38. timezone: Europe/Brussels
  39. labels:
  40. - "3. to review"
  41. - "feature: dependencies"
  42. reviewers:
  43. - "nextcloud/server-dependabot"
  44. - "provokateurin"
  45. # psalm
  46. - package-ecosystem: composer
  47. directory: "/vendor-bin/psalm"
  48. schedule:
  49. interval: weekly
  50. day: saturday
  51. time: "04:30"
  52. timezone: Europe/Madrid
  53. labels:
  54. - "3. to review"
  55. - "feature: dependencies"
  56. reviewers:
  57. - "nextcloud/server-dependabot"
  58. # phpunit
  59. - package-ecosystem: composer
  60. directory: "/vendor-bin/phpunit"
  61. schedule:
  62. interval: weekly
  63. day: saturday
  64. time: "04:40"
  65. timezone: Europe/Madrid
  66. labels:
  67. - "3. to review"
  68. - "feature: dependencies"
  69. reviewers:
  70. - "nextcloud/server-dependabot"
  71. # Main master npm
  72. - package-ecosystem: npm
  73. directory: "/"
  74. schedule:
  75. interval: weekly
  76. day: saturday
  77. time: "03:00"
  78. timezone: Europe/Paris
  79. open-pull-requests-limit: 10
  80. labels:
  81. - "3. to review"
  82. - "feature: dependencies"
  83. reviewers:
  84. - "nextcloud/server-dependabot"
  85. # Disable automatic rebasing because without a build CI will likely fail anyway
  86. rebase-strategy: "disabled"
  87. # Testing master npm
  88. - package-ecosystem: npm
  89. directory: "/build"
  90. schedule:
  91. interval: weekly
  92. day: saturday
  93. time: "03:00"
  94. timezone: Europe/Paris
  95. labels:
  96. - "3. to review"
  97. - "feature: dependencies"
  98. # Testing master composer
  99. - package-ecosystem: composer
  100. directory: "/build/integration"
  101. schedule:
  102. interval: weekly
  103. day: saturday
  104. time: "03:00"
  105. timezone: Europe/Paris
  106. labels:
  107. - "3. to review"
  108. - "feature: dependencies"
  109. - package-ecosystem: npm
  110. directory: "/"
  111. schedule:
  112. interval: weekly
  113. day: saturday
  114. time: "03:00"
  115. timezone: Europe/Paris
  116. target-branch: stable28
  117. labels:
  118. - "3. to review"
  119. - "feature: dependencies"
  120. reviewers:
  121. - "nextcloud/server-dependabot"
  122. ignore:
  123. - dependency-name: "*"
  124. update-types: ["version-update:semver-major", "version-update:semver-minor"]
  125. # Disable automatic rebasing because without a build CI will likely fail anyway
  126. rebase-strategy: "disabled"
  127. - package-ecosystem: npm
  128. directory: "/"
  129. schedule:
  130. interval: weekly
  131. day: saturday
  132. time: "03:00"
  133. timezone: Europe/Paris
  134. target-branch: stable29
  135. labels:
  136. - "3. to review"
  137. - "feature: dependencies"
  138. reviewers:
  139. - "nextcloud/server-dependabot"
  140. ignore:
  141. - dependency-name: "*"
  142. update-types: ["version-update:semver-major", "version-update:semver-minor"]
  143. # Disable automatic rebasing because without a build CI will likely fail anyway
  144. rebase-strategy: "disabled"
  145. - package-ecosystem: npm
  146. directory: "/"
  147. schedule:
  148. interval: weekly
  149. day: saturday
  150. time: "03:00"
  151. timezone: Europe/Paris
  152. target-branch: stable30
  153. labels:
  154. - "3. to review"
  155. - "feature: dependencies"
  156. reviewers:
  157. - "nextcloud/server-dependabot"
  158. ignore:
  159. - dependency-name: "*"
  160. update-types: ["version-update:semver-major", "version-update:semver-minor"]
  161. # Disable automatic rebasing because without a build CI will likely fail anyway
  162. rebase-strategy: "disabled"
  163. - package-ecosystem: composer
  164. directory: "/build/integration"
  165. schedule:
  166. interval: weekly
  167. day: saturday
  168. time: "03:00"
  169. timezone: Europe/Paris
  170. target-branch: stable28
  171. labels:
  172. - "3. to review"
  173. - "feature: dependencies"
  174. reviewers:
  175. - "nextcloud/server-dependabot"
  176. ignore:
  177. # ignore all GitHub linguist patch updates
  178. - dependency-name: "*"
  179. update-types: ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"]
  180. - package-ecosystem: composer
  181. directory: "/build/integration"
  182. schedule:
  183. interval: weekly
  184. day: saturday
  185. time: "03:00"
  186. timezone: Europe/Paris
  187. target-branch: stable29
  188. labels:
  189. - "3. to review"
  190. - "feature: dependencies"
  191. reviewers:
  192. - "nextcloud/server-dependabot"
  193. ignore:
  194. # ignore all GitHub linguist patch updates
  195. - dependency-name: "*"
  196. update-types: ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"]
  197. - package-ecosystem: composer
  198. directory: "/build/integration"
  199. schedule:
  200. interval: weekly
  201. day: saturday
  202. time: "03:00"
  203. timezone: Europe/Paris
  204. target-branch: stable30
  205. labels:
  206. - "3. to review"
  207. - "feature: dependencies"
  208. reviewers:
  209. - "nextcloud/server-dependabot"
  210. ignore:
  211. # ignore all GitHub linguist patch updates
  212. - dependency-name: "*"
  213. update-types: ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"]
  214. # GitHub Actions
  215. - package-ecosystem: "github-actions"
  216. directory: "/"
  217. schedule:
  218. interval: monthly
  219. timezone: Europe/Paris
  220. groups:
  221. github-actions:
  222. patterns:
  223. - "*"
  224. labels:
  225. - "3. to review"
  226. - "feature: dependencies"
  227. reviewers:
  228. - "nextcloud/server-dependabot"