[grade=B] DC-074+DC-091: Multi-stage Dockerfile + Dependabot config

DC-074: Multi-stage Dockerfile — builder stage installs all deps, production stage copies only node_modules + source. Reduces image size by excluding devDependencies from the final image. DC-091: .github/dependabot.yml — weekly npm + GitHub Actions dependency updates. Groups dev vs production deps separately, limits to 5 open PRs. All 1540 tests pass.
2026-08-12 05:10:01 -07:00
parent dad6af4003
commit 30acd6a237
2 changed files with 49 additions and 5 deletions
@@ -0,0 +1,36 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/dashcaddy-api"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+      - "automated"
+    groups:
+      dev-dependencies:
+        patterns:
+          - "jest"
+          - "eslint"
+          - "supertest"
+        update-types:
+          - "minor"
+          - "patch"
+      production-dependencies:
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "jest"
+          - "eslint"
+          - "supertest"
+        update-types:
+          - "patch"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+      - "automated"