xiaoxia/xiaoxia-saas
1
0
Fork 0
Code Issues 11 Pull Requests 2 Actions Packages Projects Releases 7 Wiki Activity

feat(ci): 添加Renovate依赖自动更新（#453） #876

Merged
xiaoxia merged 1 commits from feat/ci-renovate-dependabot into develop 2026-07-25 13:16:50 +08:00
Conversation 1 Commits 1 Files Changed 1
+58
xiaoxia commented 2026-07-25 13:01:45 +08:00
Owner
Copy Link
Copy Source

变更内容

添加 Renovate 依赖自动更新配置文件 renovate.json5，实现依赖自动检测和更新。

功能清单

Python 依赖

  • ✅ 检测 requirements.txt / requirements-base.txt / requirements-dev.txt / requirements-worker.txt
  • ✅ 自动创建更新 PR

前端 npm 依赖

  • ✅ 检测 apps/web/package.json
  • ✅ 自动创建更新 PR

安全漏洞

  • ✅ OSV 漏洞数据源实时检测
  • ✅ 安全更新单独标记 security 标签，优先处理

频率控制

  • ✅ 每周一凌晨 2-6 点运行（Asia/Shanghai）
  • ✅ 并发 PR 上限 3 个，避免刷屏
  • ✅ 每小时最多 3 个 PR

分组策略

  • ✅ 生产依赖 minor+patch 合并为一个 PR
  • ✅ 开发依赖 minor+patch 合并为一个 PR
  • ✅ major 更新单独 PR，标记 major-update 需人工审核

部署说明

Renovate CLI 部署在新 CI 服务器（172.30.18.199）上，通过 systemd timer 每周一凌晨触发。

关联工单

#453 #619

## 变更内容 添加 Renovate 依赖自动更新配置文件 `renovate.json5`，实现依赖自动检测和更新。 ## 功能清单 ### Python 依赖 - ✅ 检测 `requirements.txt` / `requirements-base.txt` / `requirements-dev.txt` / `requirements-worker.txt` - ✅ 自动创建更新 PR ### 前端 npm 依赖 - ✅ 检测 `apps/web/package.json` - ✅ 自动创建更新 PR ### 安全漏洞 - ✅ OSV 漏洞数据源实时检测 - ✅ 安全更新单独标记 security 标签，优先处理 ### 频率控制 - ✅ 每周一凌晨 2-6 点运行（Asia/Shanghai） - ✅ 并发 PR 上限 3 个，避免刷屏 - ✅ 每小时最多 3 个 PR ### 分组策略 - ✅ 生产依赖 minor+patch 合并为一个 PR - ✅ 开发依赖 minor+patch 合并为一个 PR - ✅ major 更新单独 PR，标记 major-update 需人工审核 ## 部署说明 Renovate CLI 部署在新 CI 服务器（172.30.18.199）上，通过 systemd timer 每周一凌晨触发。 ## 关联工单 #453 #619
xiaoxia added 1 commit 2026-07-25 13:01:45 +08:00
feat(ci): 添加Renovate依赖自动更新配置（#453）
AI Code Review / AI Code Review (pull_request) Failing after 0s
Details
CI/CD Pipeline / Check if frontend-only change (pull_request) Successful in 42s
Details
CI/CD Pipeline / Validate - Type Check (mypy) (pull_request) Successful in 1m29s
Details
CI/CD Pipeline / Frontend Lint (pull_request) Successful in 1m0s
Details
CI/CD Pipeline / Validate - Migration (alembic) (pull_request) Successful in 1m33s
Details
CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / PR Build Web Image (pull_request) Successful in 32s
Details
CI/CD Pipeline / PR Build Worker Image (pull_request) Successful in 41s
Details
Preview Deploy / Deploy Preview Environment (pull_request) Failing after 28s
Details
CI/CD Pipeline / Validate - Code Quality (pull_request) Successful in 4m2s
Details
CI/CD Pipeline / Frontend Unit Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped
Details
CI/CD Pipeline / PR Build API Image (pull_request) Successful in 3m34s
Details
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / ACR Image Cleanup (pull_request) Has been skipped
Details
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
Details
PR Automation / Auto Approve on CI Green (pull_request) Successful in 3m51s
Details
CI/CD Pipeline / Integration Tests (pull_request) Successful in 2m15s
Details
CI/CD Pipeline / Unit Tests (pull_request) Failing after 5m4s
Details
PR Automation / Auto Merge on CI Green + Approved (pull_request) Successful in 6m58s
Details
Preview Cleanup / Cleanup Preview Environment (pull_request) Successful in 9s
Details
ACR Cleanup / ACR Image Cleanup (pull_request_target) Failing after 11s
Details
950e046025 
- 配置Python + npm依赖每周自动检查
- 安全漏洞实时告警
- PR并发限制3个避免刷屏
- minor/patch分组，major单独PR
xiaoxia merged commit 248eb3266d into develop 2026-07-25 13:16:50 +08:00
xiaoxia deleted branch feat/ci-renovate-dependabot 2026-07-25 13:16:50 +08:00
gitea-actions bot commented 2026-07-25 13:17:15 +08:00
Copy Link
Copy Source

🗑️ 预览环境已清理

PR #876 已关闭或合并，对应的预览环境已被清理。

如有需要，可以重新打开 PR 来重新生成预览环境。

🗑️ **预览环境已清理** PR #876 已关闭或合并，对应的预览环境已被清理。 > 如有需要，可以重新打开 PR 来重新生成预览环境。
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
P0
阻塞性，必须立即处理
 P1
高优先级
 P2
中优先级
 P3
低优先级/后考虑
 architecture
架构设计
 backend
后端相关
 blocked
阻塞中
 bug
Bug修复
 ci-bug
CI本身的bug
 ci-optimization
CI优化类任务
 ci-pipeline
CI流水线/workflow相关
 cleanup
代码清理
 devops
运维/部署/CI
 documentation
文档相关
 feature
新功能
 frontend
前端相关
 question
需要讨论确认
 ready
PR CI通过，可合并
 refactor
代码重构
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
auto-approve-bot xiaoxia
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: xiaoxia/xiaoxia-saas#876
Delete Branch "feat/ci-renovate-dependabot"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?