From 48e81bc3bc038d3884c0d8daedec25a68f34f650 Mon Sep 17 00:00:00 2001 From: Yeicor <4929005+Yeicor@users.noreply.github.com> Date: Sat, 23 Nov 2024 11:15:56 +0100 Subject: [PATCH] Migrate dependabot to renovate --- .github/dependabot.yml | 26 ------------------------ .github/workflows/autoupdate.yml | 35 -------------------------------- renovate.json | 12 +++++++++++ 3 files changed, 12 insertions(+), 61 deletions(-) delete mode 100644 .github/dependabot.yml delete mode 100644 .github/workflows/autoupdate.yml create mode 100644 renovate.json diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 79673b4..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,26 +0,0 @@ -version: 2 -updates: - - package-ecosystem: "pip" - directory: "/" - schedule: - interval: "weekly" - day: "saturday" - time: "03:00" - - package-ecosystem: "npm" - directory: "/" - schedule: - interval: "weekly" - day: "saturday" - time: "03:00" - - package-ecosystem: "pip" - directory: "/example" - schedule: - interval: "weekly" - day: "saturday" - time: "03:00" - - package-ecosystem: "github-actions" - directory: "/.github/workflows/" - schedule: - interval: "weekly" - day: "saturday" - time: "03:00" diff --git a/.github/workflows/autoupdate.yml b/.github/workflows/autoupdate.yml deleted file mode 100644 index e2873de..0000000 --- a/.github/workflows/autoupdate.yml +++ /dev/null @@ -1,35 +0,0 @@ -on: "pull_request_target" - -permissions: - pull-requests: "write" - contents: "write" - -jobs: - dependabot: - runs-on: "ubuntu-latest" - # Checking the actor will prevent your Action run failing on non-Dependabot - # PRs but also ensures that it only does work for Dependabot PRs. - if: "${{ github.actor == 'dependabot[bot]' }}" - steps: - # This first step will fail if there's no metadata and so the approval - # will not occur. - - name: "Dependabot metadata" - id: "dependabot-metadata" - uses: "dependabot/fetch-metadata@v2" - with: - github-token: "${{ secrets.GITHUB_TOKEN }}" - # Here the PR gets approved. - - uses: "actions/checkout@v4" - - name: "Approve a PR" - run: "gh pr review --approve $PR_URL" - env: - PR_URL: "${{ github.event.pull_request.html_url }}" - GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" - # Finally, this sets the PR to allow auto-merging for patch and minor - # updates if all checks pass - - name: "Enable auto-merge for Dependabot PRs" - #if: "${{ steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major' }}" - run: "gh pr merge --auto --squash $PR_URL" - env: - PR_URL: "${{ github.event.pull_request.html_url }}" - GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" \ No newline at end of file diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..12b8cca --- /dev/null +++ b/renovate.json @@ -0,0 +1,12 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": ["config:recommended", ":disableDependencyDashboard"], + "automerge": true, + "schedule": [ + "before 9am on Saturday" + ], + "lockFileMaintenance": { + "enabled": true, + "schedule": ["before 9am on Saturday"] + } +} \ No newline at end of file