diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 8a55c11..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,11 +0,0 @@ -version: 2 -updates: - - package-ecosystem: npm - directory: '/' - schedule: - interval: weekly - open-pull-requests-limit: 10 - labels: - - 'dependencies' - - 'skip-changelog' - - 'target:canary' diff --git a/.github/renovate.json b/.github/renovate.json new file mode 100644 index 0000000..a8468e5 --- /dev/null +++ b/.github/renovate.json @@ -0,0 +1,23 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": ["config:base"], + "labels": [":dependabot:", ":label: dependencies"], + "packageRules": [ + { + "matchManagers": ["github-actions"], + "groupName": "github-actions" + } + ], + "npm": { + "stabilityDays": 3 + }, + "rangeStrategy": "bump", + "prHourlyLimit": 10, + "vulnerabilityAlerts": { + "labels": [":label: security"], + "automerge": false, + "assignees": ["@runspired"], + "enabled": true + }, + "ignorePaths": ["node_modules/**", "**/node_modules/**"] +} diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 8373aba..6d730c7 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -4,12 +4,7 @@ on: pull_request: push: branches: - - master - main - - beta - - release - - 'release-*' - - 'lts-*' tags: - '*' @@ -22,26 +17,32 @@ jobs: timeout-minutes: 5 runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - uses: actions/setup-node@v2 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0 + - uses: actions/setup-node@v4 with: - node-version: "16" - cache: "yarn" - - name: Yarn install - run: yarn --frozen-lockfile + registry-url: 'https://registry.npmjs.org' + node-version-file: 'package.json' + node-version: "18" + cache: "pnpm" + - name: Pnpm install + run: pnpm--frozen-lockfile - name: Lint js - run: yarn lint:js + run: pnpm lint:js basic-tests: name: Basic Tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - uses: actions/setup-node@v3 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.0.0 + - uses: actions/setup-node@v4 with: - node-version: "16" - cache: "yarn" + registry-url: 'https://registry.npmjs.org' + node-version-file: 'package.json' + node-version: "18" + cache: "pnpm" - name: Install Dependencies - run: yarn install --frozen-lockfile + run: pnpm install - name: Basic Development Tests - run: yarn test:development + run: pnpm test:development diff --git a/.gitignore b/.gitignore index d7dcad8..58b923f 100644 --- a/.gitignore +++ b/.gitignore @@ -14,7 +14,6 @@ .eslintcache /DEBUG /packages/*/DEBUG -/.github/ /.sass-cache /connect.lock /coverage/*