Add support for auto-merging dependabot updates

.github/dependabot.yml

@@ -1,36 +1,56 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
 version: 2
 updates:
-  - package-ecosystem: "gomod"
-    directory: "/"
+  - package-ecosystem: 'gomod'
+    directory: '/'
     schedule:
-      interval: "weekly"
-    groups:
-      all-dependencies:
-        patterns:
-          - '*'
-  - package-ecosystem: "github-actions"
-    directory: "/"
+      interval: 'daily'
+    cooldown:
+      semver-major-days: 30
+      semver-minor-days: 14
+      semver-patch-days: 7
+      exclude:
+        - 'github.com/grafana/*'
+  - package-ecosystem: 'github-actions'
+    directory: '/'
     schedule:
-      interval: "weekly"
+      interval: 'daily'
+    cooldown:
+      default-days: 7
+      exclude:
+        - 'grafana/*'
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'daily'
+    cooldown:
+      semver-major-days: 30
+      semver-minor-days: 14
+      semver-patch-days: 7
+      exclude:
+        - '@grafana/*'
     groups:
-      all-dependencies:
+      grafana-dependencies:
         patterns:
-          - '*'
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "weekly"
+          - '@grafana/data'
+          - '@grafana/runtime'
+          - '@grafana/schema'
+          - '@grafana/ui'
+          - '@grafana/prometheus'
+
+    # Ignore dependencies that need to be updated manually for compatibility reasons
     ignore:
-      - dependency-name: 'react'
+      # Keep @types/node in sync with the node version in .nvmrc
+      - dependency-name: '@types/node'
         update-types: ['version-update:semver-major']
-      - dependency-name: 'react-dom'
+      # Keep react and react-dom on the same major version used by Grafana
+      - dependency-name: react
         update-types: ['version-update:semver-major']
-    groups:
-      all-dependencies:
-        patterns:
-          - '*'
+      - dependency-name: react-dom
+        update-types: ['version-update:semver-major']
+      # Keep react-router-dom and react-router-dom-v5-compat on the same compatible major version used by Grafana
+      - dependency-name: react-router-dom
+        update-types: ['version-update:semver-major']
+      - dependency-name: react-router-dom-v5-compat
+        update-types: ['version-update:semver-major']
+      # Keep rxjs in sync with the version used by `@grafana/*` packages
+      - dependency-name: rxjs

.github/workflows/dependabot-reviewer.yml

@@ -0,0 +1,12 @@
+name: Dependabot reviewer
+on: pull_request
+permissions:
+  pull-requests: write
+  contents: write
+jobs:
+  call-workflow-passing-data:
+    uses: grafana/security-github-actions/.github/workflows/dependabot-automerge.yaml@main
+    with:
+      packages-minor-autoupdate: '["@emotion/css","@grafana/aws-sdk","@grafana/data","@grafana/plugin-ui","@grafana/prometheus","@grafana/runtime","@grafana/schema","@grafana/ui","lodash","semver","tslib","github.com/grafana/grafana-aws-sdk","github.com/grafana/grafana-plugin-sdk-go","github.com/grafana/grafana/pkg/promlib","github.com/stretchr/testify"]'
+      repository-merge-method: 'squash'
+

.nvmrc

@@ -1 +1 @@
-v20.9.0
+v22

package.json

@@ -44,7 +44,6 @@
     "@types/node": "22.15.21",
     "@types/react": "18.3.1",
     "@types/react-dom": "18.3.1",
-    "@types/react-router-dom": "5.3.3",
     "@types/semver": "7.7.0",
     "@typescript-eslint/eslint-plugin": "^8.32.1",
     "@typescript-eslint/parser": "^8.32.1",
@@ -73,7 +72,6 @@
     "replace-in-file-webpack-plugin": "^1.0.6",
     "sass": "1.89.0",
     "sass-loader": "16.0.5",
-    "semver": "^7.7.2",
     "style-loader": "4.0.0",
     "swc-loader": "0.2.6",
     "terser-webpack-plugin": "^5.3.14",
@@ -99,15 +97,11 @@
     "lodash": "4.17.21",
     "react": "18.3.1",
     "react-dom": "18.3.1",
-    "react-router-dom": "^7.6.0",
+    "react-router-dom": "^6.22.0",
     "rxjs": "7.8.2",
     "semver": "7.7.2",
     "tslib": "2.8.1"
   },
-  "resolutions": {
-    "string-width": "4.2.3",
-    "wrap-ansi": "7.0.0"
-  },
   "engines": {
     "node": ">=20"
   }