sobolevn
56521937b7
<!-- Thank you for contributing to uv! To help us out with reviewing, please consider the following: - Does this pull request include a summary of the change? (See below.) - Does this pull request include a descriptive title? - Does this pull request include references to any relevant issues? --> ## Summary I started learning `uv` by inspecting the source code. I've noticed that your shell scripts are very good! Which is rare! ## Test Plan I propose to add `shellcheck` to the CI. It is a great tool to help finding bugs and style issues in shell code. Techincal details: - This CI job will only run when any `.sh` files are changed (or the job definition file) - It takes just several seconds even on local machine: ``` » time shellcheck -S style **/*.sh shellcheck -S style **/*.sh 0.02s user 0.05s system 61% cpu 0.123 total ``` - It is easy to use, for example: I just fixed the single problem you had in your code with `# shellcheck disable=SC1091` - I am using this tool for around 8 years now and didn't have any issues. Examples: https://github.com/sobolevn/git-secret/blob/ca899f3b694187f9027161f537414422ee99c483/.github/workflows/test.yml#L22-L27 and https://github.com/wemake-services/wemake-django-template/blob/master/.github/workflows/shellcheck.yml But, I understand that build / lint tools are very subjective. So, feel free to close :)
96 lines
3.2 KiB
Plaintext
96 lines
3.2 KiB
Plaintext
{
|
|
$schema: "https://docs.renovatebot.com/renovate-schema.json",
|
|
dependencyDashboard: true,
|
|
suppressNotifications: ["prEditedNotification"],
|
|
extends: [
|
|
"config:recommended",
|
|
// For tool versions defined in GitHub Actions:
|
|
"customManagers:githubActionsVersions",
|
|
],
|
|
labels: ["internal"],
|
|
schedule: ["before 4am on Monday"],
|
|
semanticCommits: "disabled",
|
|
separateMajorMinor: false,
|
|
prHourlyLimit: 10,
|
|
enabledManagers: ["github-actions", "pre-commit", "cargo", "regex"],
|
|
cargo: {
|
|
// See https://docs.renovatebot.com/configuration-options/#rangestrategy
|
|
rangeStrategy: "update-lockfile",
|
|
fileMatch: ["^crates/.*Cargo\\.toml$"],
|
|
},
|
|
"pre-commit": {
|
|
enabled: true,
|
|
},
|
|
packageRules: [
|
|
{
|
|
// Disable updates of `zip-rs`; intentionally pinned for now due to ownership change
|
|
// See: https://github.com/astral-sh/uv/issues/3642
|
|
matchPackagePatterns: ["zip"],
|
|
matchManagers: ["cargo"],
|
|
enabled: false,
|
|
},
|
|
{
|
|
// Create dedicated branches to update references to dependencies in the documentation.
|
|
matchPaths: ["docs/**/*.md"],
|
|
commitMessageTopic: "documentation references to {{{depName}}}",
|
|
semanticCommitType: "docs",
|
|
semanticCommitScope: null,
|
|
additionalBranchPrefix: "docs-",
|
|
},
|
|
{
|
|
// Group upload/download artifact updates, the versions are dependent
|
|
groupName: "Artifact GitHub Actions dependencies",
|
|
matchManagers: ["github-actions"],
|
|
matchDatasources: ["gitea-tags", "github-tags"],
|
|
matchPackagePatterns: ["actions/.*-artifact"],
|
|
description: "Weekly update of artifact-related GitHub Actions dependencies",
|
|
},
|
|
{
|
|
// This package rule disables updates for GitHub runners:
|
|
// we'd only pin them to a specific version
|
|
// if there was a deliberate reason to do so
|
|
groupName: "GitHub runners",
|
|
matchManagers: ["github-actions"],
|
|
matchDatasources: ["github-runners"],
|
|
description: "Disable PRs updating GitHub runners (e.g. 'runs-on: macos-14')",
|
|
enabled: false,
|
|
},
|
|
{
|
|
groupName: "pre-commit dependencies",
|
|
matchManagers: ["pre-commit"],
|
|
description: "Weekly update of pre-commit dependencies",
|
|
},
|
|
{
|
|
groupName: "Rust dev-dependencies",
|
|
matchManagers: ["cargo"],
|
|
matchDepTypes: ["devDependencies"],
|
|
description: "Weekly update of Rust development dependencies",
|
|
},
|
|
{
|
|
// We don't really use PyO3 in this project; it's pulled in as an optional feature
|
|
// of the PEP 440 and PEP 508 crates, which we vendored and forked.
|
|
groupName: "pyo3",
|
|
matchManagers: ["cargo"],
|
|
matchPackagePatterns: ["pyo3"],
|
|
description: "Weekly update of pyo3 dependencies",
|
|
enabled: false,
|
|
},
|
|
],
|
|
customManagers: [
|
|
// Update major GitHub actions references in documentation.
|
|
{
|
|
customType: "regex",
|
|
fileMatch: ["^docs/.*\\.md$"],
|
|
matchStrings: [
|
|
"\\suses: (?<depName>[\\w-]+/[\\w-]+)(?<path>/.*)?@(?<currentValue>.+?)\\s",
|
|
],
|
|
datasourceTemplate: "github-tags",
|
|
versioningTemplate: "regex:^v(?<major>\\d+)$",
|
|
},
|
|
],
|
|
vulnerabilityAlerts: {
|
|
commitMessageSuffix: "",
|
|
labels: ["internal", "security"],
|
|
},
|
|
}
|