rbrooks/Quest-Board

Fork 0

Expand CI and add Renovate auto-merge config #19

Merged

rbrooks merged 2 commits from ci/expand-for-renovate into main

2026-06-24 01:07:39 +00:00

rbrooks commented

2026-06-24 00:17:55 +00:00

Owner

Sets up CI gating and a Renovate config so dependency updates can auto-merge safely.

Changes

renovate.json (replaces the bare onboarding stub) — moderate auto-merge policy:

Auto-merges on green CI: dev deps (patch/minor), runtime npm + pip deps (patch/minor), CI actions (patch/minor/digest), and Docker base-image patch/minor.
Held for dashboard approval: all majors.
The pinned discord-ext-voice-recv git fork is disabled so Renovate won't disturb the commit pin (tracks upstream PR #56).
Weekly schedule + prHourlyLimit: 3 so the initial update backlog trickles in instead of swamping the runner. Security alerts bypass the schedule.

.forgejo/workflows/ci.yml:

concurrency block — cancels superseded runs (Renovate rebases often).
ESLint step on the frontend job + a new dependency-free eslint.config.js (the lint script was wired but had no config under ESLint 10).
New lint-backend job: ruff check + ruff format --check, pinned to the same 0.4.4 as the pre-commit hook.
New docker job building the prod image stages — the gate that makes auto-merging Docker base-image bumps safe.

Notes

This is the first run of the new lint-backend and docker jobs — review them here before they become a hard gate.
The docker job needs Docker available on the runner; if it isn't, the job will need adjusting.
Branch protection on main already requires CI / * with 0 approvals, so once this merges, Renovate auto-merge is live.
Once renovate.json is on main, Renovate auto-closes its onboarding PR #18 — no need to merge that one.

🤖 Generated with Claude Code

Sets up CI gating and a Renovate config so dependency updates can auto-merge safely. ## Changes **`renovate.json`** (replaces the bare onboarding stub) — moderate auto-merge policy: - Auto-merges on green CI: dev deps (patch/minor), runtime npm + pip deps (patch/minor), CI actions (patch/minor/digest), and Docker base-image patch/minor. - Held for dashboard approval: all majors. - The pinned `discord-ext-voice-recv` git fork is disabled so Renovate won't disturb the commit pin (tracks upstream PR #56). - Weekly schedule + `prHourlyLimit: 3` so the initial update backlog trickles in instead of swamping the runner. Security alerts bypass the schedule. **`.forgejo/workflows/ci.yml`**: - `concurrency` block — cancels superseded runs (Renovate rebases often). - ESLint step on the frontend job + a new dependency-free `eslint.config.js` (the `lint` script was wired but had no config under ESLint 10). - New `lint-backend` job: `ruff check` + `ruff format --check`, pinned to the same 0.4.4 as the pre-commit hook. - New `docker` job building the prod image stages — the gate that makes auto-merging Docker base-image bumps safe. ## Notes - This is the **first run** of the new `lint-backend` and `docker` jobs — review them here before they become a hard gate. - The `docker` job needs Docker available on the runner; if it isn't, the job will need adjusting. - Branch protection on `main` already requires `CI / *` with 0 approvals, so once this merges, Renovate auto-merge is live. - Once `renovate.json` is on `main`, Renovate auto-closes its onboarding PR #18 — no need to merge that one. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

rbrooks added 1 commit

2026-06-24 00:17:55 +00:00

Expand CI and add Renovate auto-merge config

CI / Frontend tests, audit, and build (pull_request) Failing after 1m15s

Details

CI / Backend lint (ruff) (pull_request) Failing after 33s

Details

CI / Docker image build (pull_request) Failing after 8s

Details

CI / Bot tests and audit (pull_request) Successful in 2m12s

Details

CI / Backend migration, tests, and audit (pull_request) Successful in 4m10s

Details

93466bcb30

- Add renovate.json: moderate auto-merge policy (dev + patch/minor runtime,
  actions, and Docker base-image updates auto-merge on green CI; majors held
  for dashboard approval; pinned discord-ext-voice-recv fork left alone).
- CI: add concurrency cancellation, an ESLint step + dependency-free flat
  config, a ruff lint job (pinned to the pre-commit version), and a docker
  build job that validates the prod image stages (the gate that makes Docker
  base-image auto-merges safe).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

rbrooks added 1 commit

2026-06-24 00:49:22 +00:00

Make new CI gates pass: ruff lint cleanup, eslint stub, drop format-check

CI / Backend lint (ruff) (pull_request) Successful in 50s

Details

CI / Frontend tests, audit, and build (pull_request) Successful in 1m27s

Details

CI / Bot tests and audit (pull_request) Successful in 2m3s

Details

CI / Backend migration, tests, and audit (pull_request) Successful in 3m15s

Details

CI / Docker image build (pull_request) Successful in 3m15s

Details

5f81bc8fd7

- Backend ruff: remove ~55 unused imports (ruff --fix, safe fixes only) and
  hand-fix the 6 that needed judgement (4 dead locals, 2 ambiguous `l`).
  Add webapp/backend/ruff.toml ignoring E402 in tests/conftest.py (its imports
  intentionally follow env-var setup). `ruff check` is now clean.
- CI: drop `ruff format --check` — the tree predates tree-wide ruff-format
  (~105 files would change); that belongs in its own PR. Keep `ruff check`.
- Frontend eslint: register a no-op react-hooks stub so the existing
  `react-hooks/exhaustive-deps` disable directives resolve instead of erroring.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

rbrooks referenced this pull request

2026-06-24 01:07:18 +00:00

Apply tree-wide ruff format and enforce it in CI #20

rbrooks referenced this pull request

2026-06-24 01:07:26 +00:00

Replace ESLint react-hooks stub with the real plugin and clear lint warnings #21

rbrooks merged commit aa39439532 into main

2026-06-24 01:07:39 +00:00

rbrooks deleted branch ci/expand-for-renovate

2026-06-24 01:07:39 +00:00

rbrooks referenced this pull request from a commit

2026-06-24 01:07:41 +00:00