tommaso
4586b2e557
- Remix (TypeScript) + Polaris, official Shopify app template - Prisma multi-tenant schema (Settings, ExclusionRule, WithdrawalRequest, AuditLog, WebhookEvent) on Postgres - Mandatory GDPR compliance webhooks (data_request, redact, shop/redact) + HMAC handlers - API version pinned 2026-04, scopes read_orders/read_products - Fly deploy config; two-env strategy (custom now, public later) - Dev setup: shopify.web.toml + Vite allowedHosts for tunnels - Docs: PLAN.md, ANALISI-REQUISITI-LEGALI.md (Art. 54-bis compliance) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Mv83a29B4eFv5ixoj6PoE1
59 lines
1.7 KiB
YAML
59 lines
1.7 KiB
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: github-actions
|
|
directory: "/"
|
|
schedule:
|
|
interval: weekly
|
|
# Enable version updates for npm
|
|
- package-ecosystem: 'npm'
|
|
# Look for `package.json` and `lock` files in the `root` directory
|
|
directory: '/'
|
|
# Check the npm registry for updates every day (weekdays)
|
|
schedule:
|
|
interval: 'weekly'
|
|
# Dependabot defaults to 5 open pull requests at a time
|
|
open-pull-requests-limit: 100
|
|
|
|
# Cooldown is the number of days after a release to wait until opening a PR
|
|
# This gives us more confidence changes can be merged because changes have been community tested.
|
|
# See: https://github.blog/changelog/2025-07-01-dependabot-supports-configuration-of-a-minimum-package-age/
|
|
cooldown:
|
|
default-days: 14
|
|
semver-major-days: 30
|
|
semver-minor-days: 14
|
|
semver-patch-days: 14
|
|
|
|
groups:
|
|
|
|
# Group together PRs of dependant packages
|
|
prisma:
|
|
patterns:
|
|
- 'prisma'
|
|
- '@prisma/client'
|
|
react:
|
|
patterns:
|
|
- 'react'
|
|
- 'react-dom'
|
|
- '@types/react'
|
|
- '@types/react-dom'
|
|
vite:
|
|
patterns:
|
|
- 'vite'
|
|
- 'vite-tsconfig-paths'
|
|
remix:
|
|
patterns:
|
|
- '@remix-run/dev'
|
|
- '@remix-run/fs-routes'
|
|
- '@remix-run/node'
|
|
- '@remix-run/react'
|
|
- '@remix-run/eslint-config'
|
|
- '@remix-run/route-config'
|
|
|
|
# Group all patch updates not accounted for in prior groups in a single PR.
|
|
# This reduces the number of PRs to review and rebase.
|
|
patch-updates:
|
|
patterns:
|
|
- "*"
|
|
update-types:
|
|
- "patch"
|