@moku-labs/ci 1.5.1 → 1.5.3

package/README.md

@@ -119,7 +119,7 @@ flowchart LR
 | [`examples/package/publish.local-publish.yml`](examples/package/publish.local-publish.yml) | Fallback: publish from the project's own job. Use it only if the central publish fails npm auth. |
 | [`rulesets/main.json`](rulesets/main.json) | Branch ruleset for `main`: PR only, no force-push, the four `ci / …` checks required. |
 | [`examples/dependabot.yml`](examples/dependabot.yml) | Dependabot config: one grouped PR a day for `@moku-labs/*` only. `setup` writes it to `.github/dependabot.yml`. |
-| [`examples/org/fleet.yml`](examples/org/fleet.yml) | For the organization's `.github` repository. Every hour it runs `moku-release fleet --markdown` and puts the table between `<!-- fleet:start -->` and `<!-- fleet:end -->` of `profile/README.md`. |
+| [`examples/org/fleet.yml`](examples/org/fleet.yml) | For the organization's `.github` repository. Every 15 minutes it runs `moku-release fleet --markdown` and puts the table between `<!-- fleet:start -->` and `<!-- fleet:end -->` of `profile/README.md`. |
 | [`examples/package/dependabot-automerge.yml`](examples/package/dependabot-automerge.yml) | Turns on auto-merge for a Dependabot PR; the ruleset checks stay the gate. After the merge it dispatches `publish.yml` with `patch`, because a merge made by `GITHUB_TOKEN` starts no push run. `setup` writes it and allows auto-merge on the repo. |
 
 > [!TIP]

package/dist/release.mjs

@@ -2050,6 +2050,8 @@ async function runDoctor(options) {
 const RELEASE_PREFIX = "release / ";
 /** The scope every family package is published under. */
 const FAMILY_SCOPE = "@moku-labs/";
+/** The organization's profile repository. It holds the table itself and is not a row of it. */
+const PROFILE_REPO = ".github";
 /** Matches a release tag, prereleases included: `v1.2.3`, `v1.2.3-rc.0`. Not the moving `v1`. */
 const RELEASE_TAG = /^v\d+\.\d+\.\d+/;
 /** Matches a dependency pinned to one exact version. A range is not a pin and is not judged. */
@@ -2249,7 +2251,7 @@ function parseFleet(stdout) {
 		return;
 	}
 	if (!Array.isArray(nodes)) return void 0;
-	const rows = nodes.map((raw) => toRepo(raw));
+	const rows = nodes.filter((raw) => raw.name !== PROFILE_REPO).map((raw) => toRepo(raw));
 	const newest = new Map(rows.flatMap((row) => row.packageName !== void 0 && row.tag !== void 0 ? [[row.packageName, row.tag.slice(1)]] : []));
 	return rows.map(({ pinned = {}, ...row }) => ({
 		...row,

package/examples/dependabot.yml

@@ -9,6 +9,12 @@ updates:
       interval: "daily"
     allow:
       - dependency-name: "@moku-labs/*"
+    # Dependabot holds every new version back for 3 days by default. The family's own
+    # packages are trusted the moment they are released, so they skip that wait.
+    cooldown:
+      default-days: 3
+      exclude:
+        - "@moku-labs/*"
     groups:
       moku:
         patterns:

package/examples/org/fleet.yml

@@ -1,13 +1,13 @@
 name: Fleet status
 
-# For the organization's `.github` repository. Every hour it reads the state of every public
+# For the organization's `.github` repository. Every 15 minutes it reads the state of every public
 # repository with `moku-release fleet` and puts the table into profile/README.md, the page
 # GitHub shows on the organization. It commits only when the table changed.
 #
 # No token is added: GITHUB_TOKEN reads the public repositories and writes this one.
 on:
   schedule:
-    - cron: "17 * * * *"
+    - cron: "*/15 * * * *"
   workflow_dispatch:
 
 concurrency:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moku-labs/ci",
-  "version": "1.5.1",
+  "version": "1.5.3",
   "description": "Central CI and release for the moku family: reusable workflows, caller examples and the moku-release CLI.",
   "type": "module",
   "sideEffects": [