mirror of
https://github.com/arsvendg/Stirling-PDF.git
synced 2026-07-14 10:34:06 +02:00
LudyandGitHub
c0374266e7
# Description of Changes Add runner hardening and housekeeping across workflows. - .github/dependabot.yml: add /docker/unoserver and /engine to Dependabot update paths. - .github/workflows/_runner-pick.yml and .github/workflows/build.yml: add step-security/harden-runner (egress-policy: audit) to audit outbound calls from runners. - .github/workflows/ai-engine.yml, .github/workflows/aur-publish.yml, .github/workflows/package-managers.yml: update actions/checkout usage to the newer v6.0.2 reference. - .github/workflows/package-managers.yml: minor YAML formatting tidy (release types array). These changes improve CI security by auditing egress, update the checkout action to a newer release, and expand Dependabot coverage. --- ## Checklist ### General - [ ] I have read the [Contribution Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md) - [ ] I have read the [Stirling-PDF Developer Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md) (if applicable) - [ ] I have read the [How to add new languages to Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md) (if applicable) - [ ] I have performed a self-review of my own code - [ ] My changes generate no new warnings ### Documentation - [ ] I have updated relevant docs on [Stirling-PDF's doc repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/) (if functionality has heavily changed) - [ ] I have read the section [Add New Translation Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/devGuide/HowToAddNewLanguage.md#add-new-translation-tags) (for new translation tags only) ### Translations (if applicable) - [ ] I ran [`scripts/counter_translation.py`](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/docs/counter_translation.md) ### UI Changes (if applicable) - [ ] Screenshots or videos demonstrating the UI changes are attached (e.g., as comments or direct attachments in the PR) ### Testing (if applicable) - [ ] I have run `task check` to verify linters, typechecks, and tests pass - [ ] I have tested my changes locally. Refer to the [Testing Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#7-testing) for more details.
165 lines
3.6 KiB
YAML
165 lines
3.6 KiB
YAML
# To get started with Dependabot version updates, you'll need to specify which
|
|
# package ecosystems to update and where the package manifests are located.
|
|
# Please see the documentation for all configuration options:
|
|
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
|
|
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: "gradle" # See documentation for possible values
|
|
directories:
|
|
- "/" # Location of package manifests
|
|
- "/app/common"
|
|
- "/app/core"
|
|
- "/app/proprietary"
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|
|
rebase-strategy: "auto"
|
|
|
|
- package-ecosystem: "docker"
|
|
directories:
|
|
- "/" # Location of Dockerfile
|
|
- "/docker/backend"
|
|
- "/docker/embedded"
|
|
- "/docker/frontend"
|
|
- "/docker/base"
|
|
- "/docker/engine"
|
|
- "/docker/unoserver"
|
|
- "/engine"
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|
|
rebase-strategy: "auto"
|
|
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
cooldown:
|
|
default-days: 7
|
|
rebase-strategy: "auto"
|
|
|
|
- package-ecosystem: npm
|
|
directories:
|
|
- /devTools
|
|
- /frontend
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|
|
rebase-strategy: "auto"
|
|
groups:
|
|
embedpdf:
|
|
patterns:
|
|
- "@embedpdf/*"
|
|
mantine:
|
|
patterns:
|
|
- "@mantine/*"
|
|
- "postcss-preset-mantine"
|
|
mui:
|
|
patterns:
|
|
- "@mui/*"
|
|
tauri-js:
|
|
patterns:
|
|
- "@tauri-apps/*"
|
|
emotion:
|
|
patterns:
|
|
- "@emotion/*"
|
|
react:
|
|
patterns:
|
|
- "react"
|
|
- "react-dom"
|
|
- "@types/react"
|
|
- "@types/react-dom"
|
|
typescript-eslint:
|
|
patterns:
|
|
- "@typescript-eslint/*"
|
|
- "typescript-eslint"
|
|
eslint:
|
|
patterns:
|
|
- "eslint"
|
|
- "@eslint/*"
|
|
vite:
|
|
patterns:
|
|
- "vite"
|
|
- "vite-*"
|
|
- "@vitejs/*"
|
|
vitest:
|
|
patterns:
|
|
- "vitest"
|
|
- "@vitest/*"
|
|
testing-library:
|
|
patterns:
|
|
- "@testing-library/*"
|
|
i18next:
|
|
patterns:
|
|
- "i18next"
|
|
- "i18next-*"
|
|
- "react-i18next"
|
|
iconify:
|
|
patterns:
|
|
- "@iconify/*"
|
|
- "@iconify-json/*"
|
|
stripe:
|
|
patterns:
|
|
- "@stripe/*"
|
|
posthog:
|
|
patterns:
|
|
- "@posthog/*"
|
|
- "posthog-js"
|
|
supabase:
|
|
patterns:
|
|
- "@supabase/*"
|
|
dnd-kit:
|
|
patterns:
|
|
- "@dnd-kit/*"
|
|
tailwind:
|
|
patterns:
|
|
- "tailwindcss"
|
|
- "@tailwindcss/*"
|
|
postcss:
|
|
patterns:
|
|
- "postcss"
|
|
- "postcss-*"
|
|
exclude-patterns:
|
|
- "postcss-preset-mantine"
|
|
|
|
- package-ecosystem: cargo
|
|
directories:
|
|
- /frontend/editor/src-tauri
|
|
- /frontend/editor/src-tauri/thumbnail-handler
|
|
- /frontend/editor/src-tauri/provisioner
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|
|
rebase-strategy: "auto"
|
|
groups:
|
|
tauri:
|
|
patterns:
|
|
- "tauri"
|
|
- "tauri-build"
|
|
- "tauri-plugin-*"
|
|
serde:
|
|
patterns:
|
|
- "serde"
|
|
- "serde_*"
|
|
tracing:
|
|
patterns:
|
|
- "tracing"
|
|
- "tracing-*"
|
|
tokio:
|
|
patterns:
|
|
- "tokio"
|
|
- "tokio-*"
|
|
|
|
- package-ecosystem: pip
|
|
directory: /testing/cucumber
|
|
schedule:
|
|
interval: "weekly"
|
|
cooldown:
|
|
default-days: 7
|
|
rebase-strategy: "auto"
|