fix(renovate): Add separateMinorPatch #12190
Conversation
DryRun Security SummaryThe Renovate configuration file was updated with the Expand for full summarySummary: Renovate configuration file updated with Security Findings:
|
|
@kiblik Thanks for this. Just for FYI: There's someone working on the datatables updates so those should be 'normal' again shortly:
|
|
merging with two since this is dependency related |
Until now, every time when new version of the package was released, Renovate offered the latest version (so far so good). This might not be the best situation if it is not possible to update to the latest one (change of license or some other radical change), but upgrading to a higher patch (same major and minor) is safe.
Thanks to this PR, renovate will open a separate PR if there is a newer patch for the same minor.
This will help with:
7.2.5to7.2.7(without jumping to7.4- chore(deps): update redis docker tag from 7.2.10 to v7.4.5 (docker-compose.yml) #10651, https://hub.docker.com/_/redis/tags?name=7.2.7)Note: we will need the same for dependabot, because of:
urllib3:1.26.18-> 1.26.20 vs Bump urllib3 from 1.26.18 to 2.3.0 #11455pygithub:1.58.2-> 1.59.1 vs Bump pygithub from 1.58.2 to 2.6.1 #11886datatables.net-colreorder:1.6.2-> 1.7.2 vs Bump datatables.net-colreorder from 1.6.2 to 2.0.4 in /components #10765datatables.net-dt:1.13.4-> 1.13.11 vs Bump datatables.net-dt from 1.13.4 to 2.2.2 in /components #11734datatables.net:1.13.4-> 1.13.11 vs Bump datatables.net from 1.13.4 to 2.2.2 in /components #11735datatables.net-buttons-dt:2.3.6-> 2.4.3 vs Bump datatables.net-buttons-dt from 2.3.6 to 3.2.2 in /components #11755datatables.net-buttons-bs:2.3.6-> 2.4.3 vs Bump datatables.net-buttons-bs from 2.3.6 to 3.2.2 in /components #11756