diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..445b1ff --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,16 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + open-pull-requests-limit: 10 + ignore: # Ignore everything that is not a security update + - dependency-name: "*" + security-updates: true diff --git a/.github/renovate.json b/.github/renovate.json deleted file mode 100644 index 15e722c..0000000 --- a/.github/renovate.json +++ /dev/null @@ -1,21 +0,0 @@ -{ - "extends": [ - "github>rancher/renovate-config#release" - ], - "baseBranches": [ - "main" - ], - "prHourlyLimit": 2, - "vulnerabilityAlerts": { - "enabled": true - }, - "osvVulnerabilityAlerts": true, - "packageRules": [ - { - "enabled": false, - "matchPackageNames": [ - "*" - ] - } - ] -} diff --git a/.github/workflows/renovate-vault.yml b/.github/workflows/renovate-vault.yml deleted file mode 100644 index 52f6a5d..0000000 --- a/.github/workflows/renovate-vault.yml +++ /dev/null @@ -1,29 +0,0 @@ -name: Renovate -on: - workflow_dispatch: - inputs: - logLevel: - description: "Override default log level" - required: false - default: "info" - type: string - overrideSchedule: - description: "Override all schedules" - required: false - default: "false" - type: string - # Run twice in the early morning (UTC) for initial and follow up steps (create pull request and merge) - schedule: - - cron: '30 4,6 * * *' - -permissions: - contents: read - id-token: write - -jobs: - call-workflow: - uses: rancher/renovate-config/.github/workflows/renovate-vault.yml@release - with: - logLevel: ${{ inputs.logLevel || 'info' }} - overrideSchedule: ${{ github.event.inputs.overrideSchedule == 'true' && '{''schedule'':null}' || '' }} - secrets: inherit