mirror of
https://github.com/Luchexx/wacrm.git
synced 2026-11-02 09:19:51 +00:00
3799c224d8
Nine paperwork files + one devDep. All support work for a repo that's about to be public; zero runtime behaviour change. - CONTRIBUTING.md at root. Dev loop, script reference, PR style, code style, review process. Short on prose, long on specifics. - .github/CODE_OF_CONDUCT.md adopts Contributor Covenant 2.1 by reference (no inlined text). Points reports to the maintainer's email and GitHub's private flow. - .github/ISSUE_TEMPLATE/ — structured YAML forms for bug and feature reports, plus config.yml that disables blank issues and surfaces the security-disclosure + docs links. The bug form asks for version, runtime, and logs up front so triage doesn't start with a round of "where is it running?". - .github/pull_request_template.md — short checklist; nudges toward typecheck / lint / build before submit without being long enough to skip. - .github/dependabot.yml — weekly npm + github-actions scans, grouped so Supabase / @types / dev-only patches batch into single PRs instead of six per week. Next / React / Tailwind / eslint- config-next are ignored so majors stay manual. - .editorconfig — LF, UTF-8, 2 spaces, final newline, strip trailing whitespace (except in Markdown where trailing spaces are line breaks). - .prettierrc — single quotes + trailing-comma es5, matches the plurality quote style in the codebase (336 single vs 236 double in imports). Tailwind plugin sorts class names. - .prettierignore — node_modules, build output, lockfile, migrations. - package.json adds "format" / "format:check" scripts and pins prettier + prettier-plugin-tailwindcss as devDeps. - package-lock.json refreshed for the new devDeps. Important: existing source files are NOT reformatted in this PR. 153 files would change if we ran `npm run format`, which would balloon the diff and make review impossible. The reformat pass is a separate, deliberate PR. Typecheck clean; `npx prettier --check` on the new config files passes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
54 lines
1.4 KiB
YAML
54 lines
1.4 KiB
YAML
version: 2
|
|
updates:
|
|
# Runtime + dev dependencies. Weekly on Mondays — keeps the noise
|
|
# predictable and aligns with a normal review cycle.
|
|
- package-ecosystem: npm
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
day: monday
|
|
open-pull-requests-limit: 5
|
|
reviewers:
|
|
- ArnasDon
|
|
labels:
|
|
- dependencies
|
|
groups:
|
|
# Batch related upgrades into one PR so we're not closing six
|
|
# independent Supabase-bumps per week.
|
|
supabase:
|
|
patterns:
|
|
- "@supabase/*"
|
|
types:
|
|
patterns:
|
|
- "@types/*"
|
|
update-types:
|
|
- minor
|
|
- patch
|
|
dev-dependencies:
|
|
dependency-type: development
|
|
update-types:
|
|
- minor
|
|
- patch
|
|
ignore:
|
|
# Next + React + Tailwind are pinned exactly on purpose. Let
|
|
# them flow through manual major bumps when we're ready.
|
|
- dependency-name: next
|
|
- dependency-name: react
|
|
- dependency-name: react-dom
|
|
- dependency-name: tailwindcss
|
|
- dependency-name: eslint-config-next
|
|
|
|
# GitHub Actions in .github/workflows/. Catches setup-node /
|
|
# checkout version bumps that keep the CI matrix healthy.
|
|
- package-ecosystem: github-actions
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
day: monday
|
|
open-pull-requests-limit: 3
|
|
reviewers:
|
|
- ArnasDon
|
|
labels:
|
|
- dependencies
|
|
- github-actions
|