remove preset "security:minimumReleaseAgeNpm" by switching from "config:best-practices" to adding all manually

fix: ignore minAge for internal deps, replace previous rule with negative rule
2026-06-20 21:27:15 +02:00 · 2026-06-20 21:23:58 +02:00
4 changed files with 9 additions and 11 deletions
@@ -11,7 +11,7 @@ jobs:
    name: Release
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          fetch-depth: 0
      - name: Increment tag
@@ -20,6 +20,6 @@ jobs:
        with:
          token: ${{ secrets.GITEA_TOKEN }}
          prerelease: ${{ github.event_name == 'workflow_dispatch' }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@d658186b7db91d5a93dec78794c8585fa98af79c # 0.2.6
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
        with:
          tag: ${{ steps.tag.outputs.new-tag }}
@@ -17,7 +17,7 @@ jobs:
          - "docker-compose.json"
          - "bun-npm.json"
    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
      - name: Validate "${{ matrix.json-file }}"
        uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@6bf2c1355ac4430a6fb77befd36fb95243fcaa3a # 0.1.12
        with:
@@ -10,12 +10,11 @@
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["minor", "patch"],
      "matchPackageNames": [
-        "t.behrendt/actions",
-        "t.behrendt/actions/*",
-        "t.behrendt/conventional-semantic-git-tag-increment",
-        "t.behrendt/k_deploy_workflows",
-        "t.behrendt/validate-json-by-json-schema-action",
-
+        "https://gitea.t000-n.de/t.behrendt/actions/*",
+        "https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment",
+        "https://gitea.t000-n.de/t.behrendt/k_deploy_workflows",
+        "https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action",
+        
        "actions/checkout",
        "actions/cache",
        "actions/cache/*",
@@ -16,7 +16,7 @@
    {
      "description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
      "matchPackageNames": [
-        "!t.behrendt/**"
+        "!https://gitea.t000-n.de/t.behrendt/**"
      ],
      "minimumReleaseAge": "7 days",
      "minimumReleaseAgeBehaviour": "timestamp-required",
@@ -24,7 +24,6 @@
    }
  ],
  "osvVulnerabilityAlerts": true,
-  "dependencyDashboardOSVVulnerabilitySummary": "all",
  "vulnerabilityAlerts": {
    "enabled": true,
    "automerge": true,
Author	SHA1	Message	Date
t.behrendt	6077c00711	remove preset "security:minimumReleaseAgeNpm" by switching from "config:best-practices" to adding all manually CI / Test (bun-npm.json) (pull_request) Successful in 11s Details CI / Test (common.json) (pull_request) Successful in 10s Details CI / Test (docker-compose.json) (pull_request) Successful in 11s Details CI / Test (helm.json) (pull_request) Successful in 11s Details CI / Test (k8s.json) (pull_request) Successful in 11s Details CI / Test (action.json) (pull_request) Successful in 1m12s Details	2026-06-20 21:27:15 +02:00
t.behrendt	cbcf45a547	fix: ignore minAge for internal deps, replace previous rule with negative rule	2026-06-20 21:23:58 +02:00