detached f430cdb

Merge pull request #3 from pdraim/staging

feat: add Dependabot configuration with grouped updates and CODEOWNERS
commit
f430cdb8126ded8ae15ef7dbc53c998b0aea8142
author
pdraim · · 2025-08-21 07:33 UTC
committer
GitHub · · 2025-08-21 07:33 UTC
merge of
cf1cd5d + a0ed40d · diff against the first parent
signature
GPG UnverifiedB5690EEEBB952194 The key is unknown
2 files · +96 -0
Split
UnifiedSplit
A .github/CODEOWNERS +29 -0
@@ -0,0 +1,29 @@
1+# Global ownership - all files require review from @pdraim
2+* @pdraim
3+
4+# Specific ownership patterns for critical files
5+# Package management and dependencies
6+package.json @pdraim
7+pnpm-lock.yaml @pdraim
8+.github/dependabot.yml @pdraim
9+
10+# Database schema and configuration
11+drizzle.config.ts @pdraim
12+drizzle/ @pdraim
13+src/lib/db/ @pdraim
14+
15+# Core application configuration
16+svelte.config.js @pdraim
17+vite.config.ts @pdraim
18+tsconfig.json @pdraim
19+tailwind.config.ts @pdraim
20+
21+# Security and authentication related code
22+src/lib/api/session.* @pdraim
23+src/lib/utils/password.ts @pdraim
24+src/lib/validation/ @pdraim
25+src/lib/utils/security-tests.ts @pdraim
26+
27+# Server-side API routes
28+src/routes/api/ @pdraim
29+src/hooks.server.ts @pdraim⏎̸
@@ -0,0 +1,29 @@
1+# Global ownership - all files require review from @pdraim
2+* @pdraim
3+
4+# Specific ownership patterns for critical files
5+# Package management and dependencies
6+package.json @pdraim
7+pnpm-lock.yaml @pdraim
8+.github/dependabot.yml @pdraim
9+
10+# Database schema and configuration
11+drizzle.config.ts @pdraim
12+drizzle/ @pdraim
13+src/lib/db/ @pdraim
14+
15+# Core application configuration
16+svelte.config.js @pdraim
17+vite.config.ts @pdraim
18+tsconfig.json @pdraim
19+tailwind.config.ts @pdraim
20+
21+# Security and authentication related code
22+src/lib/api/session.* @pdraim
23+src/lib/utils/password.ts @pdraim
24+src/lib/validation/ @pdraim
25+src/lib/utils/security-tests.ts @pdraim
26+
27+# Server-side API routes
28+src/routes/api/ @pdraim
29+src/hooks.server.ts @pdraim⏎̸
A .github/dependabot.yml +67 -0
@@ -0,0 +1,67 @@
1+version: 2
2+updates:
3+ # npm dependencies via pnpm
4+ - package-ecosystem: "npm"
5+ directory: "/"
6+ schedule:
7+ interval: "weekly"
8+ day: "monday"
9+ time: "09:00"
10+ timezone: "Europe/Paris"
11+ # Group updates to reduce PR noise
12+ groups:
13+ # Group SvelteKit and related core framework updates
14+ sveltekit:
15+ patterns:
16+ - "@sveltejs/*"
17+ - "svelte*"
18+ update-types:
19+ - "minor"
20+ - "patch"
21+ # Group development tooling updates
22+ dev-tools:
23+ patterns:
24+ - "eslint*"
25+ - "prettier*"
26+ - "@eslint/*"
27+ - "typescript*"
28+ - "@types/*"
29+ - "vite*"
30+ - "vitest*"
31+ update-types:
32+ - "minor"
33+ - "patch"
34+ # Group Tailwind CSS related packages
35+ tailwind:
36+ patterns:
37+ - "tailwindcss*"
38+ - "@tailwindcss/*"
39+ - "autoprefixer"
40+ update-types:
41+ - "minor"
42+ - "patch"
43+ # Group Drizzle ORM related packages
44+ drizzle:
45+ patterns:
46+ - "drizzle-*"
47+ - "@libsql/*"
48+ update-types:
49+ - "minor"
50+ - "patch"
51+ # Set PR limits to avoid overwhelming the team
52+ open-pull-requests-limit: 8
53+ # Ignore packages that require manual updates or are pinned for specific reasons
54+ ignore:
55+ # Node.js version is managed via engines field and should be manually updated
56+ - dependency-name: "node"
57+ # Major framework versions should be manually reviewed due to breaking changes
58+ - dependency-name: "@sveltejs/kit"
59+ update-types: ["version-update:semver-major"]
60+ - dependency-name: "svelte"
61+ update-types: ["version-update:semver-major"]
62+ - dependency-name: "typescript"
63+ update-types: ["version-update:semver-major"]
64+ # Configure commit message format
65+ commit-message:
66+ prefix: "deps"
67+ include: "scope"⏎̸
@@ -0,0 +1,67 @@
1+version: 2
2+updates:
3+ # npm dependencies via pnpm
4+ - package-ecosystem: "npm"
5+ directory: "/"
6+ schedule:
7+ interval: "weekly"
8+ day: "monday"
9+ time: "09:00"
10+ timezone: "Europe/Paris"
11+ # Group updates to reduce PR noise
12+ groups:
13+ # Group SvelteKit and related core framework updates
14+ sveltekit:
15+ patterns:
16+ - "@sveltejs/*"
17+ - "svelte*"
18+ update-types:
19+ - "minor"
20+ - "patch"
21+ # Group development tooling updates
22+ dev-tools:
23+ patterns:
24+ - "eslint*"
25+ - "prettier*"
26+ - "@eslint/*"
27+ - "typescript*"
28+ - "@types/*"
29+ - "vite*"
30+ - "vitest*"
31+ update-types:
32+ - "minor"
33+ - "patch"
34+ # Group Tailwind CSS related packages
35+ tailwind:
36+ patterns:
37+ - "tailwindcss*"
38+ - "@tailwindcss/*"
39+ - "autoprefixer"
40+ update-types:
41+ - "minor"
42+ - "patch"
43+ # Group Drizzle ORM related packages
44+ drizzle:
45+ patterns:
46+ - "drizzle-*"
47+ - "@libsql/*"
48+ update-types:
49+ - "minor"
50+ - "patch"
51+ # Set PR limits to avoid overwhelming the team
52+ open-pull-requests-limit: 8
53+ # Ignore packages that require manual updates or are pinned for specific reasons
54+ ignore:
55+ # Node.js version is managed via engines field and should be manually updated
56+ - dependency-name: "node"
57+ # Major framework versions should be manually reviewed due to breaking changes
58+ - dependency-name: "@sveltejs/kit"
59+ update-types: ["version-update:semver-major"]
60+ - dependency-name: "svelte"
61+ update-types: ["version-update:semver-major"]
62+ - dependency-name: "typescript"
63+ update-types: ["version-update:semver-major"]
64+ # Configure commit message format
65+ commit-message:
66+ prefix: "deps"
67+ include: "scope"⏎̸

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 3

Tags 8

↑↓ moveenter openesc close