Mercurial > p > roundup > code

annotate .github/dependabot.yml @ 7809:be6cb2e0d471

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
feat: add support for rotating jwt keys This allows jwt_secret to have multiple ',' separated secrets. The first/leftmost should be used to sign new JWTs. All of them are used (starting from left/newest) to try to verify a JWT. If the first secret is < 32 chars in length JWTs are disabled. If any of the other secrets are < 32 chars, the configuration code causes the software to exit. This prevents insecure (too short) secrets from being used. Updated doc examples and tests.
author John Rouillard <rouilj@ieee.org>
date Thu, 14 Mar 2024 19:04:19 -0400
parents 93e4ec305ed8
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
7118
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
1 # To get started with Dependabot version updates, you'll need to
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
2 # specify which
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
3 # package ecosystems to update and where the package manifests are
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
4 # located.
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
5 # Please see the documentation for all configuration options:
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
6 # https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
7
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
8 version: 2
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
9 updates:
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
10 - package-ecosystem: "pip"
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
11 directory: "/" # Location of package manifests
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
12 schedule:
00a47d4addc9 Add dependabot dependency scans
John Rouillard <rouilj@ieee.org>
parents:
diff changeset
13 interval: "weekly"
7142
b486a5848cea add dependabot to github actions as well.
John Rouillard <rouilj@ieee.org>
parents: 7118
diff changeset
14
b486a5848cea add dependabot to github actions as well.
John Rouillard <rouilj@ieee.org>
parents: 7118
diff changeset
15 - package-ecosystem: "github-actions"
b486a5848cea add dependabot to github actions as well.
John Rouillard <rouilj@ieee.org>
parents: 7118
diff changeset
16 # Workflow files stored in the
b486a5848cea add dependabot to github actions as well.
John Rouillard <rouilj@ieee.org>
parents: 7118
diff changeset
17 # default location of `.github/workflows`
b486a5848cea add dependabot to github actions as well.
John Rouillard <rouilj@ieee.org>
parents: 7118
diff changeset
18 directory: "/"
b486a5848cea add dependabot to github actions as well.
John Rouillard <rouilj@ieee.org>
parents: 7118
diff changeset
19 schedule:
b486a5848cea add dependabot to github actions as well.
John Rouillard <rouilj@ieee.org>
parents: 7118
diff changeset
20 interval: "weekly"
7516
93e4ec305ed8 Disable dependabot for docker.
John Rouillard <rouilj@ieee.org>
parents: 7152
diff changeset
21 # - package-ecosystem: "docker"
93e4ec305ed8 Disable dependabot for docker.
John Rouillard <rouilj@ieee.org>
parents: 7152
diff changeset
22 # directory: "/scripts/Docker"
93e4ec305ed8 Disable dependabot for docker.
John Rouillard <rouilj@ieee.org>
parents: 7152
diff changeset
23 # target-branch: "master"
93e4ec305ed8 Disable dependabot for docker.
John Rouillard <rouilj@ieee.org>
parents: 7152
diff changeset
24 # schedule:
93e4ec305ed8 Disable dependabot for docker.
John Rouillard <rouilj@ieee.org>
parents: 7152
diff changeset
25 # interval: "weekly"
Roundup Issue Tracker: http://roundup-tracker.org/