diff --git a/.github/dependabot.yml b/.github/dependabot.yml index be006de9..62ffb6b5 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,6 +3,8 @@ # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem version: 2 updates: + # Enable version updates for GitHub Actions + # Workflow files stored in the default location of `.github/workflows` - package-ecosystem: github-actions directory: / groups: @@ -11,3 +13,155 @@ updates: - "*" # Group all Actions updates into a single larger pull request schedule: interval: weekly + labels: + - "dependencies" + - "github-actions" + open-pull-requests-limit: 5 + + # Configuration for pip (Python dependencies) + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "weekly" + cooldown: + default-days: 5 + semver-major-days: 30 + semver-minor-days: 7 + semver-patch-days: 3 + groups: + # Core dependencies - LLM providers and embeddings + llm-providers: + patterns: + - "openai" + - "anthropic" + - "google-*" + - "boto3" + - "botocore" + - "ollama" + update-types: + - "minor" + - "patch" + # Storage backends + storage: + patterns: + - "neo4j" + - "pymongo" + - "redis" + - "psycopg*" + - "asyncpg" + - "milvus*" + - "qdrant*" + update-types: + - "minor" + - "patch" + # Data processing and ML + data-processing: + patterns: + - "numpy" + - "scipy" + - "pandas" + - "tiktoken" + - "transformers" + - "torch*" + update-types: + - "minor" + - "patch" + # Web framework and API + web-framework: + patterns: + - "fastapi" + - "uvicorn" + - "gunicorn" + - "starlette" + - "pydantic*" + update-types: + - "minor" + - "patch" + # Development and testing tools + dev-tools: + patterns: + - "pytest*" + - "ruff" + - "pre-commit" + - "black" + - "mypy" + update-types: + - "minor" + - "patch" + # Minor and patch updates for everything else + python-minor-patch: + patterns: + - "*" + update-types: + - "minor" + - "patch" + labels: + - "dependencies" + - "python" + open-pull-requests-limit: 10 + + # Configuration for bun (Frontend dependencies) + - package-ecosystem: "bun" + directory: "/lightrag_webui" + schedule: + interval: "weekly" + cooldown: + default-days: 5 + semver-major-days: 30 + semver-minor-days: 7 + semver-patch-days: 3 + groups: + # React ecosystem + react: + patterns: + - "react" + - "react-dom" + - "react-router*" + - "@types/react*" + update-types: + - "minor" + - "patch" + # UI components and styling + ui-components: + patterns: + - "@radix-ui/*" + - "tailwind*" + - "@tailwindcss/*" + - "lucide-react" + - "class-variance-authority" + - "clsx" + update-types: + - "minor" + - "patch" + # Graph visualization + graph-viz: + patterns: + - "sigma" + - "@sigma/*" + - "graphology*" + update-types: + - "minor" + - "patch" + # Build tools and dev dependencies + build-tools: + patterns: + - "vite" + - "@vitejs/*" + - "typescript" + - "eslint*" + - "@eslint/*" + - "prettier" + update-types: + - "minor" + - "patch" + # All other minor and patch updates + frontend-minor-patch: + patterns: + - "*" + update-types: + - "minor" + - "patch" + labels: + - "dependencies" + - "frontend" + open-pull-requests-limit: 10 diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index 6b946ed1..618b80b4 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -23,10 +23,10 @@ jobs: # If you do not check out your code, Copilot will do this for you. steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Set up Python 3.11 - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: '3.11' diff --git a/.github/workflows/docker-build-lite.yml b/.github/workflows/docker-build-lite.yml index 9cbe6289..652c5649 100644 --- a/.github/workflows/docker-build-lite.yml +++ b/.github/workflows/docker-build-lite.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 diff --git a/.github/workflows/docker-build-manual.yml b/.github/workflows/docker-build-manual.yml index de459d5a..31027304 100644 --- a/.github/workflows/docker-build-manual.yml +++ b/.github/workflows/docker-build-manual.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 # Fetch all history for tags diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 6c290d59..b81d4f53 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 # Fetch all history for tags diff --git a/.github/workflows/linting.yaml b/.github/workflows/linting.yaml index aa054369..7aef7d13 100644 --- a/.github/workflows/linting.yaml +++ b/.github/workflows/linting.yaml @@ -14,10 +14,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v2 + uses: actions/checkout@v6 - name: Set up Python - uses: actions/setup-python@v2 + uses: actions/setup-python@v6 with: python-version: '3.x' diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml index 14c2bcc5..5c35eee2 100644 --- a/.github/workflows/pypi-publish.yml +++ b/.github/workflows/pypi-publish.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 # Fetch all history for tags @@ -40,7 +40,7 @@ jobs: echo "Frontend files:" ls -lh lightrag/api/webui/ | head -10 - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v6 with: python-version: "3.x"