{"id":19001128,"url":"https://github.com/wemake-services/kira-dependencies","last_synced_at":"2025-04-15T01:29:08.800Z","repository":{"id":37412774,"uuid":"183146936","full_name":"wemake-services/kira-dependencies","owner":"wemake-services","description":"🐿 Kira's micro-bot to update project dependencies","archived":false,"fork":false,"pushed_at":"2025-01-03T19:48:28.000Z","size":483,"stargazers_count":102,"open_issues_count":9,"forks_count":18,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-04-12T21:22:20.851Z","etag":null,"topics":["bot","dependabot","gitlab","gitlab-bot","gitlab-ci","kira-bot","rsdp","wemake-services"],"latest_commit_sha":null,"homepage":"https://dependabot.com","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/wemake-services.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null},"funding":{"github":"wemake-services"}},"created_at":"2019-04-24T04:17:01.000Z","updated_at":"2025-03-19T14:59:19.000Z","dependencies_parsed_at":"2024-01-29T10:10:13.512Z","dependency_job_id":"1112e20b-2fb2-44fb-9edd-eab0e9ac5737","html_url":"https://github.com/wemake-services/kira-dependencies","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wemake-services%2Fkira-dependencies","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wemake-services%2Fkira-dependencies/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wemake-services%2Fkira-dependencies/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wemake-services%2Fkira-dependencies/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wemake-services","download_url":"https://codeload.github.com/wemake-services/kira-dependencies/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248988492,"owners_count":21194434,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bot","dependabot","gitlab","gitlab-bot","gitlab-ci","kira-bot","rsdp","wemake-services"],"created_at":"2024-11-08T18:10:04.959Z","updated_at":"2025-04-15T01:29:08.780Z","avatar_url":"https://github.com/wemake-services.png","language":"Ruby","funding_links":["https://github.com/sponsors/wemake-services"],"categories":[],"sub_categories":[],"readme":"# Kira Dependencies Bot\n\n[![wemake.services](https://img.shields.io/badge/%20-wemake.services-green.svg?label=%20\u0026logo=data%3Aimage%2Fpng%3Bbase64%2CiVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAMAAAAoLQ9TAAAABGdBTUEAALGPC%2FxhBQAAAAFzUkdCAK7OHOkAAAAbUExURQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP%2F%2F%2F5TvxDIAAAAIdFJOUwAjRA8xXANAL%2Bv0SAAAADNJREFUGNNjYCAIOJjRBdBFWMkVQeGzcHAwksJnAPPZGOGAASzPzAEHEGVsLExQwE7YswCb7AFZSF3bbAAAAABJRU5ErkJggg%3D%3D)](https://wemake.services)\n[![kira-family](https://img.shields.io/badge/kira-family-pink.svg)](https://github.com/wemake-services/kira)\n\nGitlab bot to continuously update your dependency versions.\nFriendly fork of [`dependabot-script`](https://github.com/dependabot/dependabot-script).\nThe main difference is that the script's source is adjusted to work with [`RSDP`](https://wemake.services/meta/rsdp) process.\n\nPart of the [`@kira`](https://github.com/wemake-services/kira) bots family.\n\n## Installation\n\nWe recommend to copy this project to your Gitlab.\nAnd then setup individual CI schedules\nfor each project that you want to enable.\n\n## Configuration\n\n### Global\n\nThis is a global configuration that you should setup inside your CI variables.\n\n- `KIRA_GITLAB_PERSONAL_TOKEN` - personal access token for your bot user\n- `GITLAB_HOSTNAME` - (optional) Gitlab domain name, defaults to `gitlab.com`\n- `KIRA_GITHUB_PERSONAL_TOKEN` - Github personal access token to avoid hitting rate limit\n\n### Per schedule\n\nThis configuration is best to be setup inside CI schedule's environment.\n\n- `PACKAGE_MANAGER_SET` - magic variable, package managers to be updated, eg: `npm pip docker`\n- `DEPENDABOT_PROJECT_PATH` - project to be updated, eg: `wemake-services/kira-dependencies`\n- `DEPENDABOT_DIRECTORY` - directory to look for package file, defaults to `/`\n- `DEPENDABOT_SOURCE_BRANCH` - (optional) Source branch for merge requests, defaults to project default branch\n- `DEPENDABOT_ASSIGNEE_GITLAB_ID` - (optional) Gitlab user id to assign to merge requests\n- `DEPENDABOT_GITLAB_APPROVE_MERGE` - (optional) setup to `true` if you want our bot to approve your merge requests\n- `DEPENDABOT_GITLAB_AUTO_MERGE` - (optional) setup to `true` if you want to auto merge this request\n- `DEPENDABOT_MAX_MERGE_REQUESTS` - (optional) setup the number of max openened merge requests you want.\n- `DEPENDABOT_EXTRA_CREDENTIALS` - (optional) JSON of extra credential config, for example a private registry authentication (For example FontAwesome Pro: `[{\"type\":\"npm_registry\",\"token\":\"\u003credacted\u003e\",\"registry\":\"npm.fontawesome.com\"}]`)\n- `DEPENDABOT_IGNORED_VERSIONS` - (optional) JSON of versions which should be ignored during update. The expected format is `{\"vendor/package\": [\"\u003e0.1.0\", \"\u003e0.2.0\"]}`. It mirrors functionality of [`ignored_updates`](https://dependabot.com/docs/config-file/#ignored_updates) in dependabot.\n\n### Per package manager\n\n- `DEPENDABOT_UPDATE_STRATEGY` - (optional) change how each package manager updates your dependency versions, see list of allowed values [here](https://github.com/wemake-services/kira-dependencies/issues/39)\n- `DEPENDABOT_EXCLUDE_REQUIREMENTS_TO_UNLOCK` - (optional) exclude certain dependency updates requirements for each package manager, see list of allowed values [here](https://github.com/dependabot/dependabot-core/issues/600#issuecomment-407808103). Useful if you have lots of dependencies and the update script too slow. Example: `own all` to only use the `none` version requirement\n- `KIRA_FAIL_ON_EXCEPTION` - (optional) setup to `true` if you want the job to fail if an exception occurs\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwemake-services%2Fkira-dependencies","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwemake-services%2Fkira-dependencies","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwemake-services%2Fkira-dependencies/lists"}