diff options
| author | Jonathan Desrosiers <desrosj@git.wordpress.org> | 2025-03-21 18:27:59 +0000 |
|---|---|---|
| committer | Jonathan Desrosiers <desrosj@git.wordpress.org> | 2025-03-21 18:27:59 +0000 |
| commit | 327d76b438b6765f77cb15ab434ecf2e3d30757c (patch) | |
| tree | 47d56cd960af710ec5e2db23b56526b0855a6a2c /.github | |
| parent | 48a709e5f19b6a5b0f0bc4fb2e3713f7e56d263c (diff) | |
| download | wordpress-327d76b438b6765f77cb15ab434ecf2e3d30757c.tar.gz wordpress-327d76b438b6765f77cb15ab434ecf2e3d30757c.zip | |
Build/Test Tools: Use Dependabot to manage npm dependencies.
This expands the use of Dependabot to also manage npm dependencies by configuring several groups of related packages. After [59983], pull requests for the majority of these updates can now be staged without encountering test failures.
Props joemcgill, peterwilsoncc, swissspidy, johnbillion.
See #62221.
git-svn-id: https://develop.svn.wordpress.org/trunk@60066 602fd350-edb4-49c9-b593-d223f7449a82
Diffstat (limited to '.github')
| -rw-r--r-- | .github/dependabot.yml | 98 |
1 files changed, 98 insertions, 0 deletions
diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ae57ff8906..bb655cb528 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -29,3 +29,101 @@ updates: composer-packages: patterns: - "composer/ca-bundle" + + # Monitor some npm dependencies for updates in groups. + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "daily" + open-pull-requests-limit: 20 + ignore: + - dependency-name: "@wordpress/*" + groups: + ## + # Groups for updating devDependencies. + ## + + # Dependencies related to Playwright testing (E2E, performance). + tests-playwright: + patterns: + - "*playwright*" + # Dependencies related to JavaScript testing with QUnit. + tests-qunit: + patterns: + - "*qunit*" + - "sinon*" + # Dependencies related to CSS and SASS building and manilupating. + dev-css-sass: + patterns: + - "autoprefixer" + # postcss and css related dependencies. + - "*css*" + - "*sass" + # Dependencies related to the Webpack build process. + dev-webpack: + patterns: + - "*webpack*" + - "react-refresh" + - "source-map-loader" + # Dependencies related to the local Docker development environment. + dev-docker: + patterns: + - "dotenv*" + - "wait-on" + # Dependencies that do not fall into a specific grouping. + dev-miscellaneous: + patterns: + - "chalk" + - "check-node-version" + - "ink-docstrap" + - "install-changed" + - "matchdep" + - "uuid" + # Dependencies related to JavaScript minification. + dev-uglify: + patterns: + - "*uglify*" + # All GruntJS related dependencies that do not relate to another group. + dev-grunt: + patterns: + - "*grunt*" + + ## + # Groups for updating production dependencies. + ## + + # Dependencies related to jQuery and its ecosystem. + external-jquery: + patterns: + - "jquery*" + # Dependencies related to React and its ecosystem. + external-react: + patterns: + - "react*" + - "!react-refresh" + # Dependencies used for bundling polyfill libraries into WordPress. + external-polyfills: + patterns: + - "core-js-url-browser" + - "element-closest" + - "formdata-polyfill" + - "imagesloaded" + - "objectFitPolyfill" + - "polyfill-library" + - "regenerator-runtime" + - "whatwg-fetch" + - "wicg-inert" + # Dependencies related to the Masonry library. + external-masonry: + patterns: + - "masonry-layout" + # Dependencies that do not fall into a specific grouping. + external-miscellaneous: + patterns: + - "backbone" + - "clipboard" + - "hoverintent" + - "json2php" + - "lodash" + - "moment" + - "underscore" |