Merge pull request #130 from cznethub/configure-dependabot

Configure dependabot

.github/dependabot.yml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"

.github/workflows/dependabot-reviewer.yml

@@ -0,0 +1,41 @@
+name: Dependabot reviewer
+
+on: pull_request_target
+
+permissions:
+  pull-requests: write
+  contents: write
+
+jobs:
+  review-dependabot-pr:
+    runs-on: ubuntu-latest
+    if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
+    steps:
+      - name: Dependabot metadata
+        id: dependabot-metadata
+        uses: dependabot/[email protected]
+      - name: Enable auto-merge for Dependabot PRs
+        run: gh pr merge --auto --merge "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+      - name: Approve patch and minor updates
+        if: ${{steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch' || steps.dependabot-metadata.outputs.update-type == 'version-update:semver-minor'}}
+        run: gh pr review $PR_URL --approve -b "I'm **approving** this pull request because **it includes a patch or minor update**"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+      - name: Approve major updates of development dependencies
+        if: ${{steps.dependabot-metadata.outputs.update-type == 'version-update:semver-major' && steps.dependabot-metadata.outputs.dependency-type == 'direct:development'}}
+        run: gh pr review $PR_URL --approve -b "I'm **approving** this pull request because **it includes a major update of a dependency used only in development**"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+      - name: Comment on major updates of non-development dependencies
+        if: ${{steps.dependabot-metadata.outputs.update-type == 'version-update:semver-major' && steps.dependabot-metadata.outputs.dependency-type == 'direct:production'}}
+        run: |
+          gh pr comment $PR_URL --body "I'm **not approving** this PR because **it includes a major update of a dependency used in production**"
+          gh pr edit $PR_URL --add-label "requires-manual-qa"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

package.json

@@ -18,50 +18,50 @@
   },
   "dependencies": {
     "@cznethub/cznet-vue-core": "^0.2.28",
-    "@unhead/vue": "^1.11.15",
-    "@vueuse/core": "^12.4.0",
+    "@unhead/vue": "^1.11.18",
+    "@vueuse/core": "^12.5.0",
     "@vueuse/head": "^2.0.0",
     "@vuex-orm/core": "^0.36.4",
-    "buefy": "npm:@ntohq/buefy-next@^0.1.4",
+    "buefy": "npm:@ntohq/buefy-next@^0.2.0",
     "nprogress": "^0.2.0",
     "sprintf-js": "^1.1.3",
     "vue": "^3.5.13",
     "vue-demi": "^0.14.10",
     "vue-facing-decorator": "^3.0.4",
-    "vue-i18n": "^11.0.1",
+    "vue-i18n": "^11.1.1",
     "vue-router": "^4.5.0",
-    "vuetify": "^3.7.6",
+    "vuetify": "^3.7.11",
     "vuex": "^4.1.0",
     "vuex-persistedstate": "^4.1.0"
   },
   "devDependencies": {
-    "@antfu/eslint-config": "^3.13.0",
+    "@antfu/eslint-config": "^4.1.1",
     "@fortawesome/fontawesome-free": "^6.7.2",
-    "@iconify-json/carbon": "^1.2.5",
+    "@iconify-json/carbon": "^1.2.6",
     "@mdi/font": "^7.4.47",
     "@types/nprogress": "^0.2.3",
     "@types/sprintf-js": "^1.1.4",
     "@vitejs/plugin-vue": "^5.2.1",
     "@vue/test-utils": "^2.4.6",
     "cross-env": "^7.0.3",
-    "cypress": "^13.17.0",
+    "cypress": "^14.0.2",
     "cypress-vite": "^1.6.0",
-    "eslint": "^9.17.0",
+    "eslint": "^9.20.0",
     "eslint-plugin-cypress": "^4.1.0",
     "eslint-plugin-format": "^1.0.1",
-    "lint-staged": "^15.3.0",
-    "sass": "^1.83.1",
-    "taze": "^18.1.0",
+    "lint-staged": "^15.4.3",
+    "sass": "^1.84.0",
+    "taze": "^18.4.0",
     "typescript": "^5.7.3",
     "unplugin-auto-import": "^19.0.0",
     "unplugin-vue-components": "^28.0.0",
-    "unplugin-vue-macros": "^2.13.7",
-    "vite": "^6.0.7",
+    "unplugin-vue-macros": "^2.14.2",
+    "vite": "^6.1.0",
     "vite-plugin-pwa": "^0.21.1",
     "vite-plugin-webfont-dl": "^3.10.4",
     "vite-ssg": "^25.0.0",
     "vite-ssg-sitemap": "^0.8.1",
-    "vitest": "^2.1.8",
+    "vitest": "^3.0.5",
     "vue-tsc": "^2.2.0"
   },
   "lint-staged": {

src/assets/css/global.scss

@@ -1,2 +1,2 @@
-@import 'theme';
-@import '../font/font.css';
+@use 'theme';
+@use '../font/font.css';

src/assets/css/theme.scss

@@ -1,8 +1,8 @@
 // :root {
 
 // }
-@import '@fortawesome/fontawesome-free/css/all.min.css';
-@import '@cznethub/cznet-vue-core/styles';
+@use '@fortawesome/fontawesome-free/css/all.min.css';
+@use '@cznethub/cznet-vue-core/styles';
 
 html,
 body,