Commit Graph
14 Commits
Author SHA1 Message Date
Keli GrubbandMadison Grubb 6e7190e985 improve renovate: osv vulnerability alerts, abandonment reporting, pr limits (#8)
## Summary
* turn on `osvVulnerabilityAlerts` + `vulnerabilityAlerts` so vulnerable deps get their own PRs labeled `security`, instead of just riding along in the grouped non-major PR
* vuln PRs still respect the 3 day `minimumReleaseAge` cooldown on purpose. bypassing it would let a compromised release (shai-hulud style) land the moment it publishes, which is worse than sitting on a known cve for 3 days
* add `abandonments:recommended` so unmaintained packages get flagged early
* add `dependencies` label plus `prConcurrentLimit` / `prHourlyLimit` of 5 so a first run on a stale repo doesn't dump 30 prs
* no workflow behavior changes. schedule stays hourly, install stays as-is. just fixed the readme, which said every 6 hours while the cron was hourly

needs `dependencies` and `security` labels to exist on the repos (or org-wide), otherwise labeling just no-ops.

---------

Co-authored-by: Madison Grubb <madison@elastiflow.com>
Reviewed-on: #8
2026-08-13 14:33:55 +00:00
Madison Grubb d302725146 use semantic commits. cleanup pr body. set release age to 3 days.
Renovate / renovate (push) Successful in 2m17s
2026-04-15 11:22:25 -04:00
Keli Grubb 76cd280729 fix npm updates i think
Renovate / renovate (push) Successful in 1m56s
2026-04-14 22:05:21 -04:00
Keli Grubb 932dd2f202 improve matches for npm
Renovate / renovate (push) Successful in 1m58s
2026-04-14 21:54:48 -04:00
Keli Grubb 555216af73 swap to auto instead of replace 2026-04-14 21:45:22 -04:00
Madison Grubb 04ccad1bb4 drop github action digest pinning 2026-03-04 11:47:18 -05:00
Madison Grubb ed61653d3f use renovate cli directly 2026-03-04 11:32:03 -05:00
Madison Grubb 021445d123 move renovate down a dir 2026-03-04 11:22:33 -05:00
Madison Grubb 4294b4d929 remove woodpecker parts from config 2026-03-04 10:10:59 -05:00
Keli Grubb 8c9a95f85d move to recommended instead of best-practices in order to fix caret and digest requests
ci/woodpecker/push/ci Pipeline was successful
ci/woodpecker/manual/ci Pipeline was successful
ci/woodpecker/cron/ci Pipeline was successful
2026-02-22 15:40:11 -05:00
Keli Grubb c26a198936 fix warnings from renovate run. cleanup presets for docker
ci/woodpecker/push/ci Pipeline was successful
ci/woodpecker/manual/ci Pipeline was successful
2026-02-22 15:30:06 -05:00
Keli Grubb faf44ad0d7 fix docker and range strategy
ci/woodpecker/push/ci Pipeline was successful
ci/woodpecker/manual/ci Pipeline was successful
2026-02-22 15:22:10 -05:00
Keli Grubb f8e41272f3 fix renovate setup 2026-02-22 12:45:07 -05:00
Keli Grubb d9e0ef5991 first commit
ci/woodpecker/push/ci Pipeline was successful
ci/woodpecker/manual/ci Pipeline was successful
2026-02-21 21:23:43 -05:00