search

nextcloud / groupware

Meta repo for the groupware team
7 stars 0 forks source link

Try renovate bot for npm dependencies #63

Closed kesselb closed 1 year ago

kesselb commented 1 year ago

Describe the task

Renovate bot supports package grouping: https://docs.renovatebot.com/noise-reduction/#package-grouping

Especially mail and ckeditor would benefit from package grouping.

Affected components

Mail

To do

st3iny commented 1 year ago

Great idea! We could use it for vue, jest, fullcalendar and ckeditor.

ChristophWurst commented 1 year ago

The other aspect of renovate is to have semantical bumps for https://github.com/nextcloud/groupware/issues/60. The current shortcoming of Dependabot is that it always uses the same prefix. But I would like to use chore for dev deps and fix for patch updates of production deps.

ChristophWurst commented 1 year ago

semantical bumps

That works super well: https://github.com/ChristophWurst/nextcloud_sentry/pull/498

ChristophWurst commented 1 year ago

I would say the setup in Mail looks good now.

The only minor annoyance is the commit/PR title. It's long and doesn't tell us the previous version.

E.g. fix(deps): update dependency sabberworm/php-css-parser to ^8.4.0 (main)

I'd prefer the Dependabot-style title fix(deps): bump sabberworm/php-css-parser from 8.3 to 8.4.0

ChristophWurst commented 1 year ago

It's in place for Mail and works well. We can expand to other repos as our time allows.