@mnci/cli 4.0.6 → 4.0.7

package/dist/cli.js

@@ -1136,9 +1136,39 @@ ${githubReleases ? "" : `
         if: \${{ ${onMain} }}
 `}`;
 }
-var DEPENDABOT_CONFIG = `# Generated by MoNecromanCI. Weekly dependency-update PRs so vulnerable or
+var PIP_PROJECT_GLOBS = ["apps", "python-packages", "libs"];
+var PUB_PROJECT_GLOBS = ["apps", "packages", "libs"];
+var ECOSYSTEM_MANIFESTS = {
+  pip: ["pyproject.toml", "requirements.txt"],
+  pub: ["pubspec.yaml"]
+};
+function hasEcosystemProject(workspaceRoot, roots, manifests) {
+  return roots.some((root) => {
+    const base = (0, import_node_path2.join)(workspaceRoot, root);
+    if (!(0, import_node_fs2.existsSync)(base)) {
+      return false;
+    }
+    return (0, import_node_fs2.readdirSync)(base, { withFileTypes: true }).some(
+      (entry) => entry.isDirectory() && manifests.some((manifest) => (0, import_node_fs2.existsSync)((0, import_node_path2.join)(base, entry.name, manifest)))
+    );
+  });
+}
+function dependabotBlock(ecosystem, roots) {
+  return `
+  - package-ecosystem: ${ecosystem}
+    directories:
+` + roots.map((root) => `      - "/${root}/*"
+`).join("") + "    schedule:\n      interval: weekly\n";
+}
+function dependabotConfig(workspaceRoot) {
+  let config = `# Generated by MoNecromanCI. Weekly dependency-update PRs so vulnerable or
 # stale dependencies surface as a reviewable PR instead of only a push-time
 # warning.
+#
+# pip and pub appear here only once the workspace HAS a Python or Dart project.
+# An ecosystem entry whose directories match no manifest is a hard Dependabot
+# failure, not a no-op, so emitting them unconditionally cost every workspace
+# two red runs a week over projects it does not have.
 version: 2
 updates:
   - package-ecosystem: npm
@@ -1150,30 +1180,15 @@ updates:
     directory: "/"
     schedule:
       interval: weekly
-
-  # Globs, not one entry per project: Python projects are added later via
-  # 'mnci add python-*', so this starts covering them automatically the
-  # moment the first one exists \u2014 a glob matching nothing yet is not an error.
-  - package-ecosystem: pip
-    directories:
-      - "/apps/*"
-      - "/python-packages/*"
-      - "/libs/*"
-    schedule:
-      interval: weekly
-
-  # Same glob reasoning as pip above. Dart projects are pub workspace members,
-  # so each one declares its own dependencies even though they all resolve
-  # through the single root pubspec.lock \u2014 hence the per-project directories
-  # rather than just "/".
-  - package-ecosystem: pub
-    directories:
-      - "/apps/*"
-      - "/packages/*"
-      - "/libs/*"
-    schedule:
-      interval: weekly
 `;
+  if (hasEcosystemProject(workspaceRoot, PIP_PROJECT_GLOBS, ECOSYSTEM_MANIFESTS.pip)) {
+    config += dependabotBlock("pip", PIP_PROJECT_GLOBS);
+  }
+  if (hasEcosystemProject(workspaceRoot, PUB_PROJECT_GLOBS, ECOSYSTEM_MANIFESTS.pub)) {
+    config += dependabotBlock("pub", PUB_PROJECT_GLOBS);
+  }
+  return config;
+}
 var NX_SCAFFOLDING_TO_REMOVE = [".prettierrc", ".prettierrc.json", ".vscode"];
 function removeNxScaffolding(workspaceRoot) {
   for (const entry of NX_SCAFFOLDING_TO_REMOVE) {
@@ -1300,7 +1315,7 @@ function applyOverlay(workspaceRoot, options, onProgress = () => {
       (0, import_node_path2.join)(workspaceRoot, ".github/workflows/ci.yml"),
       githubActionsYaml(options.agent, publishUrl, options.registry.kind, options.ci)
     );
-    writeFileEnsured((0, import_node_path2.join)(workspaceRoot, ".github/dependabot.yml"), DEPENDABOT_CONFIG);
+    writeFileEnsured((0, import_node_path2.join)(workspaceRoot, ".github/dependabot.yml"), dependabotConfig(workspaceRoot));
   }
 }
 
@@ -1406,6 +1421,10 @@ function registerProjectCommands(workspaceRoot, name, commands) {
   if (commands.start) {
     scripts[`${name}:start`] = commands.start;
   }
+  const dependabotPath = (0, import_node_path3.join)(workspaceRoot, ".github/dependabot.yml");
+  if ((0, import_node_fs3.existsSync)(dependabotPath)) {
+    writeFileEnsured(dependabotPath, dependabotConfig(workspaceRoot));
+  }
   const manifestPath = (0, import_node_path3.join)(workspaceRoot, "package.json");
   const manifest = readJson(manifestPath);
   const existingScripts = manifest.scripts ?? {};