chore: migrate npm/github-actions/docker-compose from Renovate to Dependabot#2328
Conversation
…endabot Move dependency updates that Dependabot supports natively into .github/dependabot.yml (npm, github-actions, docker-compose) and slim down Renovate to handle only what Dependabot cannot: mise, nvm, the biome custom manager, and quarterly lockFileMaintenance. Add a dependabot-auto-merge workflow that mirrors the previous Renovate auto-merge policy: enable auto-merge for devDependencies (npm), github-actions, and docker-compose non-major updates; production deps and major updates stay manual. Drop the self-hosted Renovate runner (renovate.yaml workflow) since the remaining scope is small enough for Mend Cloud's Renovate App to handle under its 3GB memory cap, especially with ignoreScripts already in place. https://claude.ai/code/session_01CYmb4Y4iPCpjXMwxXsyxSh
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Warning actionlint の新しいバージョンがリリースされています。更新してください。
|
|
Warning ghalint の新しいバージョンがリリースされています。更新してください。
|
|
Caution Review failedThe pull request is closed. ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository UI Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (4)
Cache: Disabled due to data retention organization setting Knowledge base: Disabled due to data retention organization setting WalkthroughこのPRでは、npm・github-actions・docker-compose の依存更新管理を Renovate から Dependabot に移行します。新たに Dependabot v2 設定と自動マージワークフローを追加し、Renovate の管理対象を mise・nvm ランタイムのみに縮小する構成変更を実施。 ChangesDependabot への移行と自動マージワークフロー追加
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~25 minutes Possibly related issues
Possibly related PRs
Poem
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
✅ Code Duplication ReportSummary
✅ Code duplication rate is within the acceptable threshold. 📊 Detailed ReportConsole OutputDuplicate Code BlocksDuplicate 1
Duplicate 2
Duplicate 3
Duplicate 4
Duplicate 5
Duplicate 6
Duplicate 7
Duplicate 8
Duplicate 9
Duplicate 10
... and 38 more duplicate blocks. Run 📦 Full Report: Download the complete jscpd report from GitHub Actions Artifacts |
Coverage Report
File CoverageNo changed files found. |
Move dependency updates that Dependabot supports natively into
.github/dependabot.yml (npm, github-actions, docker-compose) and slim
down Renovate to handle only what Dependabot cannot: mise, nvm, the
biome custom manager, and quarterly lockFileMaintenance.
Add a dependabot-auto-merge workflow that mirrors the previous Renovate
auto-merge policy: enable auto-merge for devDependencies (npm),
github-actions, and docker-compose non-major updates; production deps
and major updates stay manual.
Drop the self-hosted Renovate runner (renovate.yaml workflow) since the
remaining scope is small enough for Mend Cloud's Renovate App to handle
under its 3GB memory cap, especially with ignoreScripts already in place.
https://claude.ai/code/session_01CYmb4Y4iPCpjXMwxXsyxSh
Summary by CodeRabbit
リリースノート
新機能
Chores