Files
apf_portal/renovate.json
T
Julien Gautier cd60b9b4e1
CI / scan (pull_request) Failing after 2m47s
CI / commits (pull_request) Successful in 2m48s
CI / check (pull_request) Successful in 2m59s
CI / a11y (pull_request) Successful in 2m39s
CI / perf (pull_request) Failing after 3m26s
chore(deps): defer Prisma major updates pending coordinated upgrade ADR
Renovate kept proposing Prisma 7 even though we deliberately
downgraded to Prisma 6 in PR #3 — `nestjs-prisma@0.27.0` is
incompatible with Prisma 7's driver-adapter contract, and the
upgrade is non-trivial enough (PrismaClient instantiation, request-
scoped lifecycle, schema validation) to warrant its own ADR rather
than a silent Renovate merge.

Add an `enabled: false` packageRule for `matchUpdateTypes: ["major"]`
on `prisma`, `@prisma/*`, `nestjs-prisma`. Patch and minor bumps of
the 6.x line keep flowing.

Document the pin and its triggers in ADR-0006:
- New "Prisma version pin: 6.x in v1" subsection — explains the
  current narrowing of "latest stable major" to 6.x and the two
  triggers for revisiting (nestjs-prisma catches up, or we drop the
  wrapper).
- §Confirmation updated to surface the pin and the Renovate rule.

The matching open PR proposing Prisma 7 will be closed manually on
Gitea; once this lands, Renovate stops re-creating it.
2026-05-06 19:21:30 +02:00

76 lines
2.1 KiB
JSON

{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["config:recommended"],
"gitAuthor": "APF Portal Bot <jgautier.webdev+apf-portal-bot@gmail.com>",
"dependencyDashboard": true,
"dependencyDashboardTitle": "Renovate Dependency Dashboard",
"labels": ["dependencies"],
"prHourlyLimit": 4,
"prConcurrentLimit": 10,
"lockFileMaintenance": {
"enabled": true
},
"osvVulnerabilityAlerts": true,
"vulnerabilityAlerts": {
"enabled": true,
"labels": ["security", "dependencies"]
},
"packageRules": [
{
"groupName": "Angular",
"matchPackageNames": [
"@angular/*",
"@angular-devkit/*",
"@angular-eslint/*",
"@schematics/angular",
"angular-eslint"
]
},
{
"groupName": "Nx",
"matchPackageNames": ["@nx/*", "nx"]
},
{
"groupName": "NestJS",
"matchPackageNames": ["@nestjs/*"]
},
{
"groupName": "Prisma",
"matchPackageNames": ["prisma", "@prisma/*", "nestjs-prisma"]
},
{
"matchPackageNames": ["prisma", "@prisma/*", "nestjs-prisma"],
"matchUpdateTypes": ["major"],
"enabled": false,
"description": "Prisma 7 requires a coordinated upgrade with nestjs-prisma compatibility (Prisma 7 was downgraded to 6 in PR #3 because nestjs-prisma 0.27.0 is incompatible with Prisma 7). Re-enable once a Prisma 7 ADR lands and the wrapper situation is settled — see ADR-0006 §'Prisma version pin: 6.x in v1'."
},
{
"groupName": "Vitest",
"matchPackageNames": ["vitest", "@vitest/*", "/^vitest-/"]
},
{
"groupName": "TypeScript tooling",
"matchPackageNames": [
"typescript",
"typescript-eslint",
"@typescript-eslint/*",
"ts-node",
"ts-jest",
"tslib"
]
},
{
"groupName": "ESLint",
"matchPackageNames": ["eslint", "eslint-*", "@eslint/*"]
},
{
"groupName": "SWC",
"matchPackageNames": ["@swc/*", "@swc-node/*"]
},
{
"groupName": "Tailwind CSS",
"matchPackageNames": ["tailwindcss", "@tailwindcss/*", "postcss"]
}
]
}