kingchenc
94cab88278
The repository had no contributor-facing documentation or automation config. Add the standard set: - CHANGELOG.md (Keep a Changelog format, 0.1.0-0.1.4 plus Unreleased) - CONTRIBUTING.md (build/test steps, change standards, PolyForm-NC note) - SECURITY.md (private reporting, supported versions) - CODE_OF_CONDUCT.md (Contributor Covenant 2.1) - .github/ISSUE_TEMPLATE (bug report, feature request, config) - .github/PULL_REQUEST_TEMPLATE.md - .github/dependabot.yml (cargo, npm, pip, github-actions — the last keeps the D1 SHA pins current) - .github/CODEOWNERS
39 lines
998 B
YAML
39 lines
998 B
YAML
version: 2
|
|
updates:
|
|
# Rust workspace (root Cargo.toml + all member crates).
|
|
- package-ecosystem: cargo
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 10
|
|
commit-message:
|
|
prefix: "deps(cargo)"
|
|
|
|
# Node binding npm dependencies.
|
|
- package-ecosystem: npm
|
|
directory: "/bindings/node"
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 10
|
|
commit-message:
|
|
prefix: "deps(npm)"
|
|
|
|
# Python binding pip dependencies.
|
|
- package-ecosystem: pip
|
|
directory: "/bindings/python"
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 10
|
|
commit-message:
|
|
prefix: "deps(pip)"
|
|
|
|
# GitHub Actions — keeps the SHA-pinned actions current (Dependabot reads
|
|
# the version comment after each pinned SHA and bumps both together).
|
|
- package-ecosystem: github-actions
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 10
|
|
commit-message:
|
|
prefix: "deps(actions)"
|