From 74b79df42731269efa3b2ed0d8af3c510b3c4493 Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Sat, 14 Feb 2026 14:25:40 +0000 Subject: [PATCH 01/10] chore: update global workflows --- .github/workflows/_codeql.yml | 11 ++++++----- .github/workflows/_common-lint.yml | 5 +++-- 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/.github/workflows/_codeql.yml b/.github/workflows/_codeql.yml index 15c5a6f6..5569a2ed 100644 --- a/.github/workflows/_codeql.yml +++ b/.github/workflows/_codeql.yml @@ -4,16 +4,13 @@ # the above-mentioned repo. name: CodeQL -permissions: - actions: read - contents: read - security-events: write +permissions: {} on: + pull_request: push: branches: - master - pull_request: schedule: - cron: '00 12 * * 0' # every Sunday at 12:00 UTC @@ -26,3 +23,7 @@ jobs: name: CodeQL uses: LizardByte/.github/.github/workflows/__call-codeql.yml@master if: ${{ github.repository != 'LizardByte/.github' }} + permissions: + actions: read + contents: read + security-events: write diff --git a/.github/workflows/_common-lint.yml b/.github/workflows/_common-lint.yml index 80be0ccf..e7760cbc 100644 --- a/.github/workflows/_common-lint.yml +++ b/.github/workflows/_common-lint.yml @@ -4,8 +4,7 @@ # the above-mentioned repo. name: common lint -permissions: - contents: read +permissions: {} on: pull_request: @@ -19,3 +18,5 @@ jobs: name: Common Lint uses: LizardByte/.github/.github/workflows/__call-common-lint.yml@master if: ${{ github.repository != 'LizardByte/.github' }} + permissions: + contents: read From 1fdaf14c99672a676798a56e3cfc51a0f3ab7fac Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Tue, 3 Mar 2026 03:55:23 +0000 Subject: [PATCH 02/10] chore: update global workflows --- .github/workflows/_common-lint.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/_common-lint.yml b/.github/workflows/_common-lint.yml index e7760cbc..276fca51 100644 --- a/.github/workflows/_common-lint.yml +++ b/.github/workflows/_common-lint.yml @@ -20,3 +20,4 @@ jobs: if: ${{ github.repository != 'LizardByte/.github' }} permissions: contents: read + pull-requests: read From 152cfc8d369d47859a08405dce57bd1d0a123281 Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Sat, 28 Mar 2026 02:15:03 +0000 Subject: [PATCH 03/10] chore: update global workflows --- .github/dependabot.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 70774ed7..368a4cd2 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -81,7 +81,9 @@ updates: open-pull-requests-limit: 10 - package-ecosystem: "pip" - directory: "/" + directories: + - "/" + - "/*" rebase-strategy: disabled schedule: interval: "cron" From 632bf5c4fa3bebdfe679de9335e30266b99a9df1 Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Sat, 28 Mar 2026 03:37:49 +0000 Subject: [PATCH 04/10] chore: update global workflows --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 368a4cd2..bef3a495 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -83,7 +83,7 @@ updates: - package-ecosystem: "pip" directories: - "/" - - "/*" + - "/**" rebase-strategy: disabled schedule: interval: "cron" From 202367ca5d303a183f5ca66208f8f66d9a9be112 Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Sat, 28 Mar 2026 13:13:03 +0000 Subject: [PATCH 05/10] chore: update global workflows --- .github/dependabot.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bef3a495..55397d10 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -84,6 +84,7 @@ updates: directories: - "/" - "/**" + - "/**/**" # https://github.com/dependabot/dependabot-core/issues/14569 rebase-strategy: disabled schedule: interval: "cron" From 7219bb334a8160aadbb8db921375500c70ee09f9 Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Sat, 28 Mar 2026 13:34:44 +0000 Subject: [PATCH 06/10] chore: update global workflows --- .github/dependabot.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 55397d10..42f147ca 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -15,7 +15,10 @@ updates: open-pull-requests-limit: 10 - package-ecosystem: "docker" - directory: "/" + directories: + - "/" + - "/**" + - "/**/**" rebase-strategy: disabled schedule: interval: "cron" From 5282ed83823ed19b0165324964bbd6ba4a1f75b9 Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Thu, 2 Apr 2026 03:47:23 +0000 Subject: [PATCH 07/10] chore: update global workflows --- .github/dependabot.yml | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 42f147ca..53fc3375 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,15 +16,16 @@ updates: - package-ecosystem: "docker" directories: - - "/" - - "/**" - - "/**/**" + - "/**/*" rebase-strategy: disabled schedule: interval: "cron" cronjob: "30 1 * * *" timezone: "America/New_York" open-pull-requests-limit: 10 + groups: + monorepo-dependencies: + group-by: dependency-name - package-ecosystem: "github-actions" directories: @@ -38,6 +39,8 @@ updates: timezone: "America/New_York" open-pull-requests-limit: 10 groups: + monorepo-dependencies: + group-by: dependency-name docker-actions: applies-to: version-updates patterns: @@ -85,9 +88,7 @@ updates: - package-ecosystem: "pip" directories: - - "/" - - "/**" - - "/**/**" # https://github.com/dependabot/dependabot-core/issues/14569 + - "/**/*" rebase-strategy: disabled schedule: interval: "cron" @@ -95,6 +96,8 @@ updates: timezone: "America/New_York" open-pull-requests-limit: 10 groups: + monorepo-dependencies: + group-by: dependency-name pytest-dependencies: applies-to: version-updates patterns: From 20f9db4351f4108092ab8a9c77c0568c9260223a Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Sat, 11 Apr 2026 19:10:50 +0000 Subject: [PATCH 08/10] chore: update global workflows --- .github/dependabot.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 53fc3375..9ce306ac 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -39,8 +39,6 @@ updates: timezone: "America/New_York" open-pull-requests-limit: 10 groups: - monorepo-dependencies: - group-by: dependency-name docker-actions: applies-to: version-updates patterns: From e2eaf3fa7ead29a4a18c8788adb24a48c7e9e26b Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Sun, 12 Apr 2026 02:23:11 +0000 Subject: [PATCH 09/10] chore: update global workflows --- .github/workflows/_top-issues.yml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 .github/workflows/_top-issues.yml diff --git a/.github/workflows/_top-issues.yml b/.github/workflows/_top-issues.yml new file mode 100644 index 00000000..3072822c --- /dev/null +++ b/.github/workflows/_top-issues.yml @@ -0,0 +1,27 @@ +--- +# This workflow is centrally managed in https://github.com/LizardByte/.github/ +# Don't make changes to this file in this repo as they will be overwritten with changes made to the same file in +# the above-mentioned repo. + +# Create a top issues dashboard + +name: Top issues +permissions: {} + +on: + schedule: + - cron: '0 6/12 * * *' + workflow_dispatch: + +concurrency: + group: 'top-issues' + cancel-in-progress: true + +jobs: + top-issues: + name: Top issues + uses: LizardByte/.github/.github/workflows/__call-top-issues.yml@master + if: github.repository_owner == 'LizardByte' + permissions: + contents: read + issues: write From ccb1aae750d59aacb9e15d509919c8f124bf9379 Mon Sep 17 00:00:00 2001 From: LizardByte-bot <108553330+LizardByte-bot@users.noreply.github.com> Date: Wed, 15 Apr 2026 01:46:29 +0000 Subject: [PATCH 10/10] chore: update global workflows --- .github/dependabot.yml | 99 ++---------------------------------------- renovate.json | 6 +++ 2 files changed, 9 insertions(+), 96 deletions(-) create mode 100644 renovate.json diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9ce306ac..18d756ba 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,56 +3,11 @@ # Don't make changes to this file in this repo as they will be overwritten with changes made to the same file in # the above-mentioned repo. +# All dependendencies, except git submodules, in this project are now managed by Renovate. +# See https://github.com/LizardByte/.github/blob/master/renovate-config.json5 for configuration. + version: 2 updates: - - package-ecosystem: "cargo" - directory: "/" - rebase-strategy: disabled - schedule: - interval: "cron" - cronjob: "0 1 * * *" - timezone: "America/New_York" - open-pull-requests-limit: 10 - - - package-ecosystem: "docker" - directories: - - "/**/*" - rebase-strategy: disabled - schedule: - interval: "cron" - cronjob: "30 1 * * *" - timezone: "America/New_York" - open-pull-requests-limit: 10 - groups: - monorepo-dependencies: - group-by: dependency-name - - - package-ecosystem: "github-actions" - directories: - - "/" - - "/.github/actions/*" - - "/actions/*" - rebase-strategy: disabled - schedule: - interval: "cron" - cronjob: "0 2 * * *" - timezone: "America/New_York" - open-pull-requests-limit: 10 - groups: - docker-actions: - applies-to: version-updates - patterns: - - "docker/*" - github-actions: - applies-to: version-updates - patterns: - - "actions/*" - - "github/*" - lizardbyte-actions: - applies-to: version-updates - patterns: - - "LizardByte/*" - - package-ecosystem: "gitsubmodule" directory: "/" rebase-strategy: disabled @@ -61,51 +16,3 @@ updates: cronjob: "30 2 * * *" timezone: "America/New_York" open-pull-requests-limit: 10 - - - package-ecosystem: "npm" - directory: "/" - rebase-strategy: disabled - schedule: - interval: "cron" - cronjob: "0 3 * * *" - timezone: "America/New_York" - open-pull-requests-limit: 10 - groups: - dev-dependencies: - applies-to: version-updates - dependency-type: "development" - - - package-ecosystem: "nuget" - directory: "/" - rebase-strategy: disabled - schedule: - interval: "cron" - cronjob: "30 3 * * *" - timezone: "America/New_York" - open-pull-requests-limit: 10 - - - package-ecosystem: "pip" - directories: - - "/**/*" - rebase-strategy: disabled - schedule: - interval: "cron" - cronjob: "0 4 * * *" - timezone: "America/New_York" - open-pull-requests-limit: 10 - groups: - monorepo-dependencies: - group-by: dependency-name - pytest-dependencies: - applies-to: version-updates - patterns: - - "pytest*" - - - package-ecosystem: "rust-toolchain" - directory: "/" - rebase-strategy: disabled - schedule: - interval: "cron" - cronjob: "30 4 * * *" - timezone: "America/New_York" - open-pull-requests-limit: 1 diff --git a/renovate.json b/renovate.json new file mode 100644 index 00000000..de13970f --- /dev/null +++ b/renovate.json @@ -0,0 +1,6 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "local>LizardByte/.github:renovate-config" + ] +}