From d5bcf222ee710d2db9ee209bb17cd653df55da10 Mon Sep 17 00:00:00 2001 From: avivkeller Date: Sun, 24 Aug 2025 15:18:55 -0400 Subject: [PATCH 1/3] feat(internal-deps): use dependabot --- .github/dependabot.yml | 11 ++++ .../update-internal-dependencies.yml | 53 ------------------- 2 files changed, 11 insertions(+), 53 deletions(-) delete mode 100644 .github/workflows/update-internal-dependencies.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml index df3532e6..45e86837 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -13,6 +13,17 @@ updates: cooldown: default-days: 3 open-pull-requests-limit: 10 + + - package-ecosystem: 'npm' + directory: '/' + versioning-strategy: increase + schedule: + interval: daily + commit-message: + prefix: meta + allow: + - dependency-name: '@node-core/*' + - package-ecosystem: npm directory: '/' versioning-strategy: increase diff --git a/.github/workflows/update-internal-dependencies.yml b/.github/workflows/update-internal-dependencies.yml deleted file mode 100644 index c5721482..00000000 --- a/.github/workflows/update-internal-dependencies.yml +++ /dev/null @@ -1,53 +0,0 @@ -name: Upgrade @node-core/* Dependencies - -on: - workflow_dispatch: - schedule: - - cron: '0 3 * * 0' # Runs weekly on Sunday at 03:00 UTC - -env: - COMMIT_MESSAGE: 'chore: upgrade internal dependencies to latest versions' - -jobs: - upgrade-node-core-deps: - runs-on: ubuntu-latest - - steps: - - name: Checkout repository - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - with: - persist-credentials: false - - - name: Set up Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 - with: - node-version-file: '.nvmrc' - cache: 'npm' - - - name: Upgrade @node-core/* dependencies in package.json - run: | - # Parse package.json and find @node-core/* dependencies (both deps/devDeps) - for section in dependencies devDependencies; do - jq -r --arg section "$section" '.[$section] | keys[]' package.json | grep '^@node-core/' | while read dep; do - # Get latest version from npm - latest=$(npm view "$dep" version) - echo "Upgrading $dep to $latest" - # Use jq to update the version in package.json - jq --arg section "$section" --arg dep "$dep" --arg ver "$latest" \ - '(.[$section][$dep]) |= $ver' package.json > package.json.tmp && mv package.json.tmp package.json - done - done - - - name: Install upgraded dependencies - run: npm install - - - name: Create or update PR for upgraded dependencies - uses: gr2m/create-or-update-pull-request-action@b65137ca591da0b9f43bad7b24df13050ea45d1b # v1.10.1 - with: - title: ${{ env.COMMIT_MESSAGE }} - body: 'This PR upgrades all @node-core/* dependencies in package.json to their latest versions.' - commit-message: ${{ env.COMMIT_MESSAGE }} - branch: 'upgrade-node-core-deps' - path: '.' - env: - GITHUB_TOKEN: ${{ secrets.DOC_KIT_BOT_PAT }} From 62b4c645e0c6b1b621600cd9a65b4f8b41774a2f Mon Sep 17 00:00:00 2001 From: Aviv Keller Date: Wed, 27 Aug 2025 18:20:12 -0400 Subject: [PATCH 2/3] Update .github/dependabot.yml Co-authored-by: Matt Cowley --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 45e86837..9aae49c1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -14,7 +14,7 @@ updates: default-days: 3 open-pull-requests-limit: 10 - - package-ecosystem: 'npm' + - package-ecosystem: npm directory: '/' versioning-strategy: increase schedule: From f3fcca79fd89b8a619d74bc4b2feb5cfcec8efe5 Mon Sep 17 00:00:00 2001 From: Aviv Keller Date: Wed, 27 Aug 2025 18:20:55 -0400 Subject: [PATCH 3/3] Change Dependabot schedule from daily to monthly --- .github/dependabot.yml | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9aae49c1..cffe51e8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -14,16 +14,6 @@ updates: default-days: 3 open-pull-requests-limit: 10 - - package-ecosystem: npm - directory: '/' - versioning-strategy: increase - schedule: - interval: daily - commit-message: - prefix: meta - allow: - - dependency-name: '@node-core/*' - - package-ecosystem: npm directory: '/' versioning-strategy: increase @@ -31,8 +21,6 @@ updates: interval: monthly commit-message: prefix: meta - ignore: - - dependency-name: '@node-core/*' cooldown: default-days: 3 groups: