Archived
austin
37a387e7b1
Same site — glass header, bento grid, hero drift, dark mode — with three things fixed on the way: - Tailwind and lucide came from CDNs on every page load, and the fonts from Google. All are now built in or self-hosted, so the site owes nothing to third parties at runtime. - The hero and bento photographs were hot-linked from Unsplash. They are re-encoded to webp and served from the MinIO bucket with a year-long cache. - The ministries and labs were hard-coded in the markup, so launching a ministry meant editing HTML. They now come from /api/network. The mobile menu button also opens something now; it did nothing before.
22 lines
1.0 KiB
JSON
22 lines
1.0 KiB
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": ["config:recommended"],
|
|
"packageRules": [
|
|
{
|
|
"description": "Bennett platform releases: our own code, already tested and Trivy-scanned before publish. Group the parent + BOM + starters into one PR and merge it automatically so security fixes reach this app without manual work. Merging main triggers the build, which re-runs tests and re-scans; if either fails no image is pushed, so a bad bump can't reach production.",
|
|
"matchPackageNames": ["net.thebennett.platform:**"],
|
|
"groupName": "bennett platform",
|
|
"automerge": true
|
|
},
|
|
{
|
|
"description": "Stay on Testcontainers 1.x. 2.0 renamed the module artifacts (postgresql, junit-jupiter), so the major bump doesn't just fail the build — its POM won't even parse. Revisit deliberately, not via a bot PR.",
|
|
"matchPackageNames": ["org.testcontainers:**"],
|
|
"matchUpdateTypes": ["major"],
|
|
"enabled": false
|
|
}
|
|
],
|
|
"vulnerabilityAlerts": {
|
|
"labels": ["security"]
|
|
}
|
|
}
|