Hermes
30acd6a237
DC-074: Multi-stage Dockerfile — builder stage installs all deps, production stage copies only node_modules + source. Reduces image size by excluding devDependencies from the final image. DC-091: .github/dependabot.yml — weekly npm + GitHub Actions dependency updates. Groups dev vs production deps separately, limits to 5 open PRs. All 1540 tests pass.
37 lines
738 B
YAML
37 lines
738 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "npm"
|
|
directory: "/dashcaddy-api"
|
|
schedule:
|
|
interval: "weekly"
|
|
open-pull-requests-limit: 5
|
|
labels:
|
|
- "dependencies"
|
|
- "automated"
|
|
groups:
|
|
dev-dependencies:
|
|
patterns:
|
|
- "jest"
|
|
- "eslint"
|
|
- "supertest"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
production-dependencies:
|
|
patterns:
|
|
- "*"
|
|
exclude-patterns:
|
|
- "jest"
|
|
- "eslint"
|
|
- "supertest"
|
|
update-types:
|
|
- "patch"
|
|
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
labels:
|
|
- "dependencies"
|
|
- "automated"
|