mirror of
https://github.com/snapotter-hq/SnapOtter.git
synced 2026-08-03 07:46:42 +02:00
SnapOtterandGitHub
b28c9dd2da
Dependabot proposed nvidia/cuda 12.6.3 to 12.9.2 (#441), a minor bump the existing semver-major ignore did not catch. The 12.6 base is deliberate: the AI bundle wheels are cu126, libcublas-12-6 matches, and a 12.9 base requires driver R575+ so the container fails to start on common 570.x production drivers (the regression PR #334 fixed). Ignore nvidia/cuda >= 12.7 so 12.6.x patch bumps still flow while 12.7+ is held back.
67 lines
1.9 KiB
YAML
67 lines
1.9 KiB
YAML
version: 2
|
|
|
|
updates:
|
|
# npm/pnpm dependencies (root lockfile covers entire monorepo)
|
|
- package-ecosystem: "npm"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 10
|
|
groups:
|
|
production-deps:
|
|
dependency-type: "production"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
dev-deps:
|
|
dependency-type: "development"
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|
|
ignore:
|
|
- dependency-name: "*"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
# Python dependencies (AI sidecar)
|
|
- package-ecosystem: "pip"
|
|
directory: "/packages/ai/python"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 5
|
|
ignore:
|
|
- dependency-name: "*"
|
|
update-types: ["version-update:semver-major"]
|
|
|
|
# Docker base images
|
|
- package-ecosystem: "docker"
|
|
directory: "/docker"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 3
|
|
ignore:
|
|
- dependency-name: "*"
|
|
update-types: ["version-update:semver-major"]
|
|
# nvidia/cuda base is pinned to 12.6.x on purpose. The AI bundle wheels are
|
|
# cu126 (torch/paddle/onnxruntime-gpu), libcublas-12-6 matches it, and a 12.9
|
|
# base requires driver R575+ so the container fails to start on common 570.x
|
|
# production drivers. See the comment above the FROM in docker/Dockerfile.
|
|
# Allow 12.6.x patch bumps; block 12.7+ until the wheels and driver baseline
|
|
# move together (closed dependabot #441 for this reason).
|
|
- dependency-name: "nvidia/cuda"
|
|
versions: [">= 12.7"]
|
|
|
|
# GitHub Actions
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
open-pull-requests-limit: 5
|
|
groups:
|
|
actions:
|
|
patterns:
|
|
- "*"
|