mirror of
https://github.com/profullstack/agentbbs.git
synced 2026-08-13 14:27:27 +00:00
Anthony Ettinger
0bd4d10088
Audit of every version pin in the repo: Ergo (2.18.0), Go (1.26 → latest patch via setup-go), the Ubuntu pod base (24.04 LTS), and the GitHub Action majors are all already current. Only Forgejo was stale — bump 11.0.1 → 11.0.15 (latest patch of the 11.x LTS line; a 15.x major stays a deliberate, tested upgrade because of DB migrations). Add .github/dependabot.yml so github-actions, Go modules, and the Docker image tags (Mailu compose + pod Containerfile) get review-gated update PRs weekly. Shell-string pins (FORGEJO_VERSION/ERGO_VERSION in setup.sh) can't be watched by Dependabot; noted inline. Mailu runtime patch level is handled by the mailu-update workflow. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
42 lines
1.3 KiB
YAML
42 lines
1.3 KiB
YAML
# Keep agentbbs's pinned dependencies current automatically. Dependabot opens
|
|
# (review-gated) PRs when a newer version ships — nothing auto-merges, so a bad
|
|
# bump can't silently reach production.
|
|
#
|
|
# Coverage:
|
|
# - github-actions : the action pins in .github/workflows/* (checkout, setup-go…)
|
|
# - gomod : Go module dependencies (go.mod / go.sum)
|
|
# - docker : image tags in the Mailu compose stack and the pod Containerfile
|
|
#
|
|
# NOT covered (Dependabot can't watch shell-string pins): FORGEJO_VERSION and
|
|
# ERGO_VERSION in setup.sh — bump those by hand, or switch to Renovate (which can
|
|
# watch them via a custom regex manager). The Mailu *runtime* patch level is kept
|
|
# current separately by .github/workflows/mailu-update.yml.
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
groups:
|
|
github-actions:
|
|
patterns: ["*"]
|
|
|
|
- package-ecosystem: gomod
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
groups:
|
|
go-modules:
|
|
patterns: ["*"]
|
|
|
|
# Mailu compose stack — bumps ghcr.io/mailu/* image tags.
|
|
- package-ecosystem: docker
|
|
directory: /deploy/mailu
|
|
schedule:
|
|
interval: weekly
|
|
|
|
# Pod base image (docker.io/library/ubuntu).
|
|
- package-ecosystem: docker
|
|
directory: /pods
|
|
schedule:
|
|
interval: weekly
|