@@ -11,8 +11,10 @@ updates:
1111 # So, only this first section can include "applies-to: security-updates"
1212 - package-ecosystem : " npm"
1313 directory : " /"
14+ # Monthly dependency updates (NOTE: "schedule" doesn't apply to security updates)
1415 schedule :
15- interval : " weekly"
16+ interval : " monthly"
17+ time : " 05:00"
1618 # Allow up to 10 open PRs for dependencies
1719 open-pull-requests-limit : 10
1820 # Group together Angular package upgrades
@@ -22,6 +24,7 @@ updates:
2224 applies-to : version-updates
2325 patterns :
2426 - " @angular*"
27+ - " @ngtools/webpack"
2528 update-types :
2629 - " minor"
2730 - " patch"
@@ -30,6 +33,7 @@ updates:
3033 applies-to : security-updates
3134 patterns :
3235 - " @angular*"
36+ - " @ngtools/webpack"
3337 update-types :
3438 - " minor"
3539 - " patch"
@@ -142,6 +146,99 @@ updates:
142146 - " minor"
143147 - " patch"
144148 ignore :
149+ # Restrict zone.js updates to patch level to avoid dependency conflicts with @angular/core
150+ - dependency-name : " zone.js"
151+ update-types : ["version-update:semver-major", "version-update:semver-minor"]
152+ # Restrict typescript updates to patch level because that's what our package.json says
153+ - dependency-name : " typescript"
154+ update-types : ["version-update:semver-major", "version-update:semver-minor"]
155+ # Ignore all major version updates for all dependencies. We'll only automate minor/patch updates.
156+ - dependency-name : " *"
157+ update-types : ["version-update:semver-major"]
158+ # ####################
159+ # # dspace-9_x branch
160+ # ####################
161+ - package-ecosystem : " npm"
162+ directory : " /"
163+ target-branch : dspace-9_x
164+ schedule :
165+ interval : " monthly"
166+ time : " 05:00"
167+ # Allow up to 10 open PRs for dependencies
168+ open-pull-requests-limit : 10
169+ # Group together Angular package upgrades
170+ groups :
171+ # Group together all patch version updates for Angular in a single PR
172+ angular :
173+ applies-to : version-updates
174+ patterns :
175+ - " @angular*"
176+ - " @ngtools/webpack"
177+ update-types :
178+ - " minor"
179+ - " patch"
180+ # Group together all minor/patch version updates for NgRx in a single PR
181+ ngrx :
182+ applies-to : version-updates
183+ patterns :
184+ - " @ngrx*"
185+ - " @ngtools/webpack"
186+ update-types :
187+ - " minor"
188+ - " patch"
189+ # Group together all patch version updates for eslint in a single PR
190+ eslint :
191+ applies-to : version-updates
192+ patterns :
193+ - " @typescript-eslint*"
194+ - " eslint*"
195+ update-types :
196+ - " minor"
197+ - " patch"
198+ # Group together any testing related version updates
199+ testing :
200+ applies-to : version-updates
201+ patterns :
202+ - " @cypress*"
203+ - " axe-*"
204+ - " cypress*"
205+ - " jasmine*"
206+ - " karma*"
207+ - " ng-mocks"
208+ update-types :
209+ - " minor"
210+ - " patch"
211+ # Group together any postcss related version updates
212+ postcss :
213+ applies-to : version-updates
214+ patterns :
215+ - " postcss*"
216+ update-types :
217+ - " minor"
218+ - " patch"
219+ # Group together any sass related version updates
220+ sass :
221+ applies-to : version-updates
222+ patterns :
223+ - " sass*"
224+ update-types :
225+ - " minor"
226+ - " patch"
227+ # Group together any webpack related version updates
228+ webpack :
229+ applies-to : version-updates
230+ patterns :
231+ - " webpack*"
232+ update-types :
233+ - " minor"
234+ - " patch"
235+ ignore :
236+ # Restrict zone.js updates to patch level to avoid dependency conflicts with @angular/core
237+ - dependency-name : " zone.js"
238+ update-types : ["version-update:semver-major", "version-update:semver-minor"]
239+ # Restrict typescript updates to patch level because that's what our package.json says
240+ - dependency-name : " typescript"
241+ update-types : ["version-update:semver-major", "version-update:semver-minor"]
145242 # Ignore all major version updates for all dependencies. We'll only automate minor/patch updates.
146243 - dependency-name : " *"
147244 update-types : ["version-update:semver-major"]
@@ -152,7 +249,8 @@ updates:
152249 directory : " /"
153250 target-branch : dspace-8_x
154251 schedule :
155- interval : " weekly"
252+ interval : " monthly"
253+ time : " 05:00"
156254 # Allow up to 10 open PRs for dependencies
157255 open-pull-requests-limit : 10
158256 # Group together Angular package upgrades
@@ -162,6 +260,7 @@ updates:
162260 applies-to : version-updates
163261 patterns :
164262 - " @angular*"
263+ - " @ngtools/webpack"
165264 update-types :
166265 - " minor"
167266 - " patch"
@@ -220,6 +319,12 @@ updates:
220319 - " minor"
221320 - " patch"
222321 ignore :
322+ # Restrict zone.js updates to patch level to avoid dependency conflicts with @angular/core
323+ - dependency-name : " zone.js"
324+ update-types : ["version-update:semver-major", "version-update:semver-minor"]
325+ # Restrict typescript updates to patch level because that's what our package.json says
326+ - dependency-name : " typescript"
327+ update-types : ["version-update:semver-major", "version-update:semver-minor"]
223328 # Ignore all major version updates for all dependencies. We'll only automate minor/patch updates.
224329 - dependency-name : " *"
225330 update-types : ["version-update:semver-major"]
@@ -230,7 +335,8 @@ updates:
230335 directory : " /"
231336 target-branch : dspace-7_x
232337 schedule :
233- interval : " weekly"
338+ interval : " monthly"
339+ time : " 05:00"
234340 # Allow up to 10 open PRs for dependencies
235341 open-pull-requests-limit : 10
236342 # Group together Angular package upgrades
@@ -240,6 +346,7 @@ updates:
240346 applies-to : version-updates
241347 patterns :
242348 - " @angular*"
349+ - " @ngtools/webpack"
243350 update-types :
244351 - " minor"
245352 - " patch"
@@ -293,6 +400,12 @@ updates:
293400 # 7.x Cannot update Webpack past v5.76.1 as later versions not supported by Angular 15
294401 # See also https://github.com/DSpace/dspace-angular/pull/3283#issuecomment-2372488489
295402 - dependency-name : " webpack"
403+ # Restrict zone.js updates to patch level to avoid dependency conflicts with @angular/core
404+ - dependency-name : " zone.js"
405+ update-types : ["version-update:semver-major", "version-update:semver-minor"]
406+ # Restrict typescript updates to patch level because that's what our package.json says
407+ - dependency-name : " typescript"
408+ update-types : ["version-update:semver-major", "version-update:semver-minor"]
296409 # Ignore all major version updates for all dependencies. We'll only automate minor/patch updates.
297410 - dependency-name : " *"
298411 update-types : ["version-update:semver-major"]
0 commit comments