Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Renovate config to enable the Automated dependency updates #83

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

rainx
Copy link
Contributor

@rainx rainx commented Sep 16, 2023

当前的问题

当前使用的很多软件的依赖没有自动升级,很快会outdated, 有潜在的安全风险。

Renovate

我们可以使用 Renovate 来自动处理依赖的升级管理,通过配置一定的规则来实现自动升级
目前的规则是:
根据 conventionalcommits 的定义,对于

  • Non-major Updates 也就是 minor, patch 或者 pin dependencies 级别的修改,自动升级并merge
  • Major Updates, 也就是 major 包的修改,则会创建PR 人工 review.

需要如何操作

  1. Merge 此 PR
  2. 需要添加 Renovate Bot 到仓库 -> https://github.com/apps/renovate ,Grant 合适的访问此仓库的权限
    之后 RenovateBot 会根据 <root>/renovate.json 的定义进行自动依赖管理

@vercel
Copy link

vercel bot commented Sep 16, 2023

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
learning-prompt ✅ Ready (Inspect) Visit Preview 💬 Add feedback Sep 16, 2023 2:30pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant