chore: update renovate config

Signed-off-by: Francisco Buceta <[email protected]>

.github/renovate.json5

@@ -1,93 +1,89 @@
 {
   $schema: 'https://docs.renovatebot.com/renovate-schema.json',
   extends: [
-    ':combinePatchMinorReleases',
-    ':separateMajorReleases',
-    ':semanticCommits',
-    ':semanticPrefixChore',
-    ':semanticCommitScopeDisabled',
-    ':updateNotScheduled',
-    ':automergeRequireAllStatusChecks',
-    ':ignoreUnstable',
-    ':gitSignOff',
     'group:monorepos',
     'helpers:disableTypesNodeMajor'
   ],
+
+  labels: ['dependencies'],
+  rangeStrategy: 'bump',
+  prHourlyLimit: 2,
+  prConcurrentLimit: 20,
+  updateNotScheduled: true,
+  commitBody: 'Signed-off-by: {{{gitAuthor}}}',
   ignorePaths: [
     '**/node_modules/**',
     '**/__tests__/**',
     '**/test/**'
   ],
-  force: {
-    constraints: {
-      npm: '>=7'
-    },
-  },
-  labels: [
-    'dependencies'
-  ],
+
+  // Semantic Commits
+  semanticCommits: 'enabled',
+  semanticCommitType: 'chore',
+  semanticCommitScope: null, // Null is valid!
+
+  // Dependency Dashboard
   dependencyDashboard: true,
-  dependencyDashboardApproval: false,
   dependencyDashboardAutoclose: true,
+
+  // Lock File Maintenance
   lockFileMaintenance: {
     enabled: true,
     automerge: true,
-    extends: [
-      'schedule:earlyMondays'
-    ]
+    extends: ['schedule:earlyMondays']
+  },
+
+  // Vulnerability Alerts
+  vulnerabilityAlerts: {
+    enabled: true,
+    addLabels: ['SECURITY'],
+    reviewers: ['team:loopback-maintainers']
   },
+
+  // Package Rules
   packageRules: [
     {
       automerge: true,
       matchUpdateTypes: [
-        'minor',
-        'patch'
-      ],
+        'patch',
+        'minor'
+      ]
+    },
+    {
+      draftPR: true,
+      matchUpdateTypes: "major"
     },
     {
       automerge: true,
-      matchDepTypes: [
-        'devDependencies'
-      ]
+      matchDepTypes: ['devDependencies']
     },
     {
       enabled: false,
-      matchDepTypes: [
-        'engines'
-      ]
+      matchDepTypes: ['engines']
     },
     {
-      groupName: 'api-extractor packages',
-      matchPackageNames: [
-        '@microsoft/api-extractor',
-        '@microsoft/api-documenter'
-      ]
+      groupName: 'Lint packages',
+      matchPackageNames: ['prettier'],
+      matchPackagePatterns: ['^eslint', '^@typescript-eslint']
     },
     {
-      groupName: 'ajv-validator packages',
-      matchPackagePatterns: [
-        '^ajv'
-      ]
+      groupName: 'Ajv packages',
+      matchPackagePatterns: ['^ajv']
     },
     {
-      groupName: 'yeoman packages',
-      matchSourceUrlPrefixes: [
-        'https://github.com/yeoman'
-      ]
+      groupName: 'Socket.io packages',
+      matchPackageNames: ['socket.io', 'socket.io-client']
+    },
+    {
+      groupName: 'Yeoman packages',
+      matchPackagePatterns: ['^yeoman']
     },
     {
-      groupName: 'socket.io packages',
+      groupName: 'api-extractor packages',
       matchPackageNames: [
-        'socket.io',
-        'socket.io-client'
+        '@microsoft/api-extractor',
+        '@microsoft/api-documenter'
       ]
     }
-  ],
-  prConcurrentLimit: 10,
-  prHourlyLimit: 2,
-  rangeStrategy: 'bump',
-  supportPolicy: [
-    'lts',
-    'current'
   ]
 }

.github/workflows/codeql-analysis.yml

@@ -1,18 +1,12 @@
-# For most projects, this workflow file will not need changing; you simply need
-# to commit it to your repository.
-#
-# You may wish to alter this file to override the set of languages analyzed,
-# or to provide custom queries or build logic.
 name: "CodeQL"
 
 on:
   push:
     branches: [master]
   pull_request:
-    # The branches below must be a subset of the branches above
     branches: [master]
   schedule:
-    - cron: '0 13 * * 6'
+    - cron: '0 13 * * 6' # At 13:00 on Saturday
 
 permissions: {}
 

.github/workflows/continuous-integration.yml

@@ -4,7 +4,6 @@ on:
   push:
     branches: [master]
   pull_request:
-    # The branches below must be a subset of the branches above
     branches: [master]
   schedule:
     - cron: '0 2 * * 1' # At 02:00 on Monday
@@ -61,6 +60,7 @@ jobs:
     name: Post-Test
     needs: test
     runs-on: ubuntu-latest
+    if: ${{ success() }}
     steps:
     - name: Coveralls finished
       uses: coverallsapp/github-action@master
@@ -73,10 +73,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - name: Use Node.js 16
-        uses: actions/setup-node@v2
+      - uses: actions/setup-node@v2
         with:
-          node-version: 16
+          node-version: 16 # LTS
       - name: Bootstrap benchmark tests
         run: |
           npm ci --ignore-scripts
@@ -89,10 +88,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - name: Use Node.js 16
-        uses: actions/setup-node@v2
+      - uses: actions/setup-node@v2
         with:
-          node-version: 16
+          node-version: 16 # LTS
       - name: Bootstrap project
         run: |
           npm ci --ignore-scripts
@@ -112,41 +110,40 @@ jobs:
       - uses: actions/checkout@v2
         with:
           fetch-depth: 0
-      - name: Use Node.js 16
-        uses: actions/setup-node@v2
+      - uses: actions/setup-node@v2
         with:
-          node-version: 16
+          node-version: 16 # LTS
       - name: Install monorepo tools
         run: |
           npm ci --ignore-scripts
           npx lerna bootstrap --scope "@loopback/monorepo" --include-dependencies
       - name: Verify commit linting
         run: npx commitlint --from origin/master --to HEAD --verbose
 
-  ci-lint:
-    name: CI Lint
+  renovate-config-validator:
+    name: Renovate Config Validator
     runs-on: ubuntu-latest
+    if: ${{ github.event.pull_request }}
     steps:
       - uses: actions/checkout@v2
         with:
           fetch-depth: 0
       - uses: actions/setup-node@v2
         with:
-          node-version: 16
+          node-version: 16 # LTS
       - name: Install monorepo tools
         run: npm ci --ignore-scripts
       - name: Validate Renovate config
-        run: npx --no-install renovate-config-validator
+        run: npx -p renovate --yes renovate-config-validator
 
   verify-docs:
     name: Verify Docs
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - name: Use Node.js 16
-        uses: actions/setup-node@v2
+      - uses: actions/setup-node@v2
         with:
-          node-version: 16
+          node-version: 16 # LTS
       - name: Bootstrap project
         run: |
           npm ci --ignore-scripts

.github/workflows/renovate-config-validator.yml

@@ -0,0 +1,27 @@
+name: Renovate Config Validator
+
+on:
+  pull_request:
+    paths:
+      - '.github/renovate.json5'
+
+permissions: {}
+
+env:
+  NODE_OPTIONS: --max-old-space-size=4096
+
+jobs:
+  main:
+    name: Main
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v2
+        with:
+          node-version: 16 # LTS
+      - name: Install monorepo tools
+        run: npm ci --ignore-scripts
+      - name: Validate Renovate config
+        run: npx -p renovate --yes renovate-config-validator

.lintstagedrc

@@ -1,9 +1,7 @@
 {
-  "*.{ts,js}": [
+  "*.{js,ts}": [
     "node packages/build/bin/run-prettier --write",
     "node packages/build/bin/run-eslint --fix --report-unused-disable-directives --cache"
   ],
-  "*.{md}": [
-    "node packages/build/bin/run-prettier --write"
-  ]
+  "*.md": "node packages/build/bin/run-prettier --write"
 }