Niels Lohmann
66452227ac
The hash-pinned requirements-semgrep.txt kept breaking: Semgrep pins its own dependencies to exact or compatible-release versions, so Dependabot bumps of any of them (importlib-metadata, exceptiongroup, jsonschema, peewee, wcmatch, wrapt, ...) made the job fail with ResolutionImpossible. Install the latest Semgrep with pip instead, remove the lock file and the Dependabot ignore list that tried to work around it. Signed-off-by: Niels Lohmann <mail@nlohmann.me>
63 lines
1.4 KiB
YAML
63 lines
1.4 KiB
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
schedule:
|
|
interval: daily
|
|
cooldown:
|
|
default-days: 7
|
|
groups:
|
|
codeql-action:
|
|
patterns:
|
|
- "github/codeql-action/*"
|
|
|
|
- package-ecosystem: pip
|
|
directory: /docs/mkdocs
|
|
schedule:
|
|
interval: daily
|
|
cooldown:
|
|
default-days: 7
|
|
|
|
- package-ecosystem: npm
|
|
directory: /docs/mkdocs/scripts/mermaid
|
|
schedule:
|
|
interval: daily
|
|
cooldown:
|
|
default-days: 7
|
|
ignore:
|
|
# Material for MkDocs loads mermaid@11; keep the checker on the same major version
|
|
- dependency-name: mermaid
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
- package-ecosystem: pip
|
|
directory: /tools/astyle
|
|
schedule:
|
|
interval: daily
|
|
cooldown:
|
|
default-days: 7
|
|
ignore:
|
|
# astyle is deliberately pinned (see tools/astyle/requirements.txt): newer versions
|
|
# reformat the code, and the pinned version defines the formatting CI enforces
|
|
- dependency-name: astyle
|
|
|
|
- package-ecosystem: pip
|
|
directory: /tools/generate_natvis
|
|
schedule:
|
|
interval: daily
|
|
cooldown:
|
|
default-days: 7
|
|
|
|
- package-ecosystem: pip
|
|
directory: /tools/serve_header
|
|
schedule:
|
|
interval: daily
|
|
cooldown:
|
|
default-days: 7
|
|
|
|
- package-ecosystem: pip
|
|
directory: /cmake/requirements
|
|
schedule:
|
|
interval: daily
|
|
cooldown:
|
|
default-days: 7
|