mirror of
https://github.com/Vateron-Media/XC_VM.git
synced 2026-10-03 20:02:29 +02:00
Divarion_D
2abd19b0d5
dependabot.yml: the comment claimed "no Composer/npm manifests committed", but src/composer.json + composer.lock ARE committed. Added a grouped composer ecosystem (directory /src) so the 4 prod deps and the dev tools get advisory monitoring; noted the production-only vendor recommit step. instructions/php-conventions + architecture-rules: rewritten to the current Composer PSR-4 architecture. They previously described the pre-migration state and misdirected Copilot: - "No autoloading via Composer — custom src/autoload.php" (file removed) and "Do NOT introduce Composer dependencies" → Composer PSR-4, vendor committed production-only, dump-autoload workflow - lowercase paths (src/cli, src/core, src/modules, …) → real PascalCase (src/Cli, src/Core, src/Modules, src/Streaming, …) - setDb() / $r-prefix (both gone from the codebase) → DatabaseAware + self::db(); dropped the dead $r naming rule - inverted namespace guidance → new code is namespaced; legacy coexists, don't mass-migrate - dangling ARCHITECTURE.md ref → docs/en/development/architecture.md (which exists), src/config/modules.php path fixed
33 lines
952 B
YAML
33 lines
952 B
YAML
version: 2
|
|
updates:
|
|
# GitHub Actions pinned in .github/workflows/*.
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
commit-message:
|
|
prefix: "ci"
|
|
labels:
|
|
- "dependencies"
|
|
- "github-actions"
|
|
|
|
# Composer dependencies. The manifest and lockfile are committed at src/
|
|
# (composer.json + composer.lock). NOTE: vendor/ is committed and
|
|
# PRODUCTION-ONLY — after merging a bump you must re-commit a production
|
|
# vendor with `composer install --no-dev` (and `composer dump-autoload`);
|
|
# never run `composer install` on a deploy path. See CLAUDE.md.
|
|
# Grouped so each run opens a single PR instead of one per package.
|
|
- package-ecosystem: "composer"
|
|
directory: "/src"
|
|
schedule:
|
|
interval: "weekly"
|
|
commit-message:
|
|
prefix: "deps"
|
|
labels:
|
|
- "dependencies"
|
|
- "composer"
|
|
groups:
|
|
composer:
|
|
patterns:
|
|
- "*"
|