dependabot.yml 5.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235
  1. # SPDX-FileCopyrightText: 2020 Nextcloud GmbH and Nextcloud contributors
  2. # SPDX-License-Identifier: AGPL-3.0-or-later
  3. version: 2
  4. updates:
  5. # Linting and coding style
  6. - package-ecosystem: composer
  7. directory: "/"
  8. schedule:
  9. interval: weekly
  10. day: saturday
  11. time: "03:00"
  12. timezone: Europe/Paris
  13. labels:
  14. - "3. to review"
  15. - "feature: dependencies"
  16. reviewers:
  17. - "nextcloud/server-dependabot"
  18. # cs-fixer
  19. - package-ecosystem: composer
  20. directory: "/vendor-bin/cs-fixer"
  21. schedule:
  22. interval: weekly
  23. day: saturday
  24. time: "04:10"
  25. timezone: Europe/Copenhagen
  26. labels:
  27. - "3. to review"
  28. - "feature: dependencies"
  29. reviewers:
  30. - "nextcloud/server-dependabot"
  31. # openapi-extractor
  32. - package-ecosystem: composer
  33. directory: "/vendor-bin/openapi-extractor"
  34. schedule:
  35. interval: weekly
  36. day: saturday
  37. time: "04:20"
  38. timezone: Europe/Brussels
  39. labels:
  40. - "3. to review"
  41. - "feature: dependencies"
  42. reviewers:
  43. - "nextcloud/server-dependabot"
  44. - "provokateurin"
  45. # psalm
  46. - package-ecosystem: composer
  47. directory: "/vendor-bin/psalm"
  48. schedule:
  49. interval: weekly
  50. day: saturday
  51. time: "04:30"
  52. timezone: Europe/Madrid
  53. labels:
  54. - "3. to review"
  55. - "feature: dependencies"
  56. reviewers:
  57. - "nextcloud/server-dependabot"
  58. # Main master npm
  59. - package-ecosystem: npm
  60. directory: "/"
  61. schedule:
  62. interval: weekly
  63. day: saturday
  64. time: "03:00"
  65. timezone: Europe/Paris
  66. open-pull-requests-limit: 10
  67. labels:
  68. - "3. to review"
  69. - "feature: dependencies"
  70. reviewers:
  71. - "nextcloud/server-dependabot"
  72. # Disable automatic rebasing because without a build CI will likely fail anyway
  73. rebase-strategy: "disabled"
  74. # Testing master npm
  75. - package-ecosystem: npm
  76. directory: "/build"
  77. schedule:
  78. interval: weekly
  79. day: saturday
  80. time: "03:00"
  81. timezone: Europe/Paris
  82. labels:
  83. - "3. to review"
  84. - "feature: dependencies"
  85. # Testing master composer
  86. - package-ecosystem: composer
  87. directory: "/build/integration"
  88. schedule:
  89. interval: weekly
  90. day: saturday
  91. time: "03:00"
  92. timezone: Europe/Paris
  93. labels:
  94. - "3. to review"
  95. - "feature: dependencies"
  96. # Main stableXX npm
  97. - package-ecosystem: npm
  98. directory: "/"
  99. schedule:
  100. interval: weekly
  101. day: saturday
  102. time: "03:00"
  103. timezone: Europe/Paris
  104. target-branch: stable27
  105. labels:
  106. - "3. to review"
  107. - "feature: dependencies"
  108. reviewers:
  109. - "nextcloud/server-dependabot"
  110. ignore:
  111. # ignore all GitHub linguist patch updates
  112. - dependency-name: "*"
  113. update-types: ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"]
  114. # Disable automatic rebasing because without a build CI will likely fail anyway
  115. rebase-strategy: "disabled"
  116. - package-ecosystem: npm
  117. directory: "/"
  118. schedule:
  119. interval: weekly
  120. day: saturday
  121. time: "03:00"
  122. timezone: Europe/Paris
  123. target-branch: stable28
  124. labels:
  125. - "3. to review"
  126. - "feature: dependencies"
  127. reviewers:
  128. - "nextcloud/server-dependabot"
  129. ignore:
  130. # ignore all GitHub linguist patch updates
  131. - dependency-name: "*"
  132. update-types: ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"]
  133. # Disable automatic rebasing because without a build CI will likely fail anyway
  134. rebase-strategy: "disabled"
  135. - package-ecosystem: npm
  136. directory: "/"
  137. schedule:
  138. interval: weekly
  139. day: saturday
  140. time: "03:00"
  141. timezone: Europe/Paris
  142. target-branch: stable29
  143. labels:
  144. - "3. to review"
  145. - "feature: dependencies"
  146. reviewers:
  147. - "nextcloud/server-dependabot"
  148. ignore:
  149. # ignore all GitHub linguist patch updates
  150. - dependency-name: "*"
  151. update-types: ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"]
  152. # Disable automatic rebasing because without a build CI will likely fail anyway
  153. rebase-strategy: "disabled"
  154. # Testing StableXX composer
  155. - package-ecosystem: composer
  156. directory: "/build/integration"
  157. schedule:
  158. interval: weekly
  159. day: saturday
  160. time: "03:00"
  161. timezone: Europe/Paris
  162. target-branch: stable27
  163. labels:
  164. - "3. to review"
  165. - "feature: dependencies"
  166. reviewers:
  167. - "nextcloud/server-dependabot"
  168. ignore:
  169. # ignore all GitHub linguist patch updates
  170. - dependency-name: "*"
  171. update-types: ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"]
  172. - package-ecosystem: composer
  173. directory: "/build/integration"
  174. schedule:
  175. interval: weekly
  176. day: saturday
  177. time: "03:00"
  178. timezone: Europe/Paris
  179. target-branch: stable28
  180. labels:
  181. - "3. to review"
  182. - "feature: dependencies"
  183. reviewers:
  184. - "nextcloud/server-dependabot"
  185. ignore:
  186. # ignore all GitHub linguist patch updates
  187. - dependency-name: "*"
  188. update-types: ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"]
  189. - package-ecosystem: composer
  190. directory: "/build/integration"
  191. schedule:
  192. interval: weekly
  193. day: saturday
  194. time: "03:00"
  195. timezone: Europe/Paris
  196. target-branch: stable29
  197. labels:
  198. - "3. to review"
  199. - "feature: dependencies"
  200. reviewers:
  201. - "nextcloud/server-dependabot"
  202. ignore:
  203. # ignore all GitHub linguist patch updates
  204. - dependency-name: "*"
  205. update-types: ["version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch"]
  206. # GitHub Actions
  207. - package-ecosystem: "github-actions"
  208. directory: "/"
  209. schedule:
  210. interval: monthly
  211. timezone: Europe/Paris
  212. groups:
  213. github-actions:
  214. patterns:
  215. - "*"
  216. labels:
  217. - "3. to review"
  218. - "feature: dependencies"
  219. reviewers:
  220. - "nextcloud/server-dependabot"