Skip to content

Commit 9f60d2c

Browse files
committed
ci: enhance security for Renovate PRs
This will help to prevent Renovate from opening PR for any new npm published versions which might contain supply-chain attack See https://docs.renovatebot.com/presets-npm/
1 parent 1c1077f commit 9f60d2c

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

renovate.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,14 +5,16 @@
55
"group:docusaurusMonorepo",
66
":prHourlyLimit2",
77
"helpers:pinGitHubActionDigests",
8+
":semanticCommitTypeAll(build)",
9+
"npm:unpublishSafe",
810
"workarounds:all"
911
],
1012
"timezone": "UTC",
1113
"rangeStrategy": "bump",
1214
"separateMajorMinor": true,
1315
"prConcurrentLimit": 2,
1416
"semanticCommits": "enabled",
15-
"commitMessagePrefix": "build(deps):",
17+
"internalChecksFilter": "strict",
1618
"ignoreDeps": [
1719
"@mdx-js/react",
1820
"@types/react",

0 commit comments

Comments
 (0)