@oddessentials/repo-standards 1.1.0 → 1.2.1

package/dist/config/standards.rust.json

@@ -433,6 +433,66 @@
       }
     ],
     "recommended": [
+      {
+        "ciHints": {
+          "azure-devops": {
+            "notes": "CI hints are suggested mappings; adjust to your pipeline topology.",
+            "stage": "quality"
+          },
+          "github-actions": {
+            "job": "ci",
+            "notes": "CI hints are suggested mappings; adjust to your workflow structure."
+          }
+        },
+        "description": "Automate dependency updates using Renovate or Dependabot to keep dependencies current and reduce security exposure window.",
+        "id": "dependency-update-automation",
+        "label": "Dependency Update Automation",
+        "stack": {
+          "anyOfFiles": [
+            "renovate.json",
+            ".renovaterc.json",
+            ".github/dependabot.yml"
+          ],
+          "exampleConfigFiles": [
+            "renovate.json",
+            ".github/dependabot.yml"
+          ],
+          "exampleTools": [
+            "renovate",
+            "dependabot"
+          ],
+          "notes": "Both support Cargo.toml/Cargo.lock. Works with cargo workspaces. Security scanning is covered by dependency-security (cargo-audit/cargo-deny).",
+          "verification": "Check for renovate.json OR .github/dependabot.yml. Verify Cargo dependency PRs."
+        }
+      },
+      {
+        "ciHints": {
+          "azure-devops": {
+            "notes": "CI hints are suggested mappings; adjust to your pipeline topology.",
+            "stage": "quality"
+          },
+          "github-actions": {
+            "job": "ci",
+            "notes": "CI hints are suggested mappings; adjust to your workflow structure."
+          }
+        },
+        "description": "Enforce module boundaries and import constraints to prevent architectural drift and unwanted coupling.",
+        "id": "dependency-architecture-rules",
+        "label": "Dependency Architecture Rules",
+        "stack": {
+          "exampleConfigFiles": [
+            "deny.toml"
+          ],
+          "exampleTools": [
+            "cargo-deny"
+          ],
+          "notes": "cargo-deny's [bans] section enforces dependency graph rules (deny specific crates, wildcards). Extend existing config if using for security scanning.",
+          "optionalFiles": [
+            "deny.toml"
+          ],
+          "verification": "Run 'cargo deny check bans' to verify dependency constraints."
+        }
+      },
       {
         "ciHints": {
           "azure-devops": {
@@ -568,7 +628,8 @@
           "type-checking",
           "unit-test-runner",
           "unit-test-reporter",
-          "dependency-security"
+          "dependency-security",
+          "dependency-update-automation"
         ],
         "notes": "Pin tool and runtime versions in CI and containers to avoid flaky differences across environments.",
         "step": 3,
@@ -596,5 +657,5 @@
   },
   "stack": "rust",
   "stackLabel": "Rust",
-  "version": 1
+  "version": 2
 }

package/dist/config/standards.typescript-js.azure-devops.json

@@ -397,6 +397,67 @@
       }
     ],
     "recommended": [
+      {
+        "ciHints": {
+          "azure-devops": {
+            "notes": "CI hints are suggested mappings; adjust to your pipeline topology.",
+            "stage": "quality"
+          }
+        },
+        "description": "Automate dependency updates using Renovate or Dependabot to keep dependencies current and reduce security exposure window.",
+        "id": "dependency-update-automation",
+        "label": "Dependency Update Automation",
+        "stack": {
+          "anyOfFiles": [
+            "renovate.json",
+            ".renovaterc.json",
+            "renovate.json5",
+            ".renovaterc.json5",
+            ".github/dependabot.yml"
+          ],
+          "exampleConfigFiles": [
+            "renovate.json",
+            ".github/dependabot.yml"
+          ],
+          "exampleTools": [
+            "renovate",
+            "dependabot"
+          ],
+          "notes": "Renovate supports GHA + AzDO (self-hosted or Mend Renovate App). Dependabot is GitHub-native only. For AzDO: use Renovate via self-hosted runner, Docker container job, or Mend's hosted service.",
+          "pinningNotes": "Pin Renovate Docker image version in AzDO pipelines for determinism.",
+          "verification": "Check for renovate.json (or .renovaterc.json) OR .github/dependabot.yml. Verify dependency update PRs are being created."
+        }
+      },
+      {
+        "ciHints": {
+          "azure-devops": {
+            "notes": "CI hints are suggested mappings; adjust to your pipeline topology.",
+            "stage": "quality"
+          }
+        },
+        "description": "Enforce module boundaries and import constraints to prevent architectural drift and unwanted coupling.",
+        "id": "dependency-architecture-rules",
+        "label": "Dependency Architecture Rules",
+        "stack": {
+          "anyOfFiles": [
+            ".dependency-cruiser.cjs",
+            ".dependency-cruiser.js",
+            "dependency-cruiser.config.cjs",
+            ".dependency-cruiser.mjs"
+          ],
+          "exampleConfigFiles": [
+            ".dependency-cruiser.cjs",
+            ".dependency-cruiser.js",
+            "dependency-cruiser.config.cjs"
+          ],
+          "exampleTools": [
+            "dependency-cruiser"
+          ],
+          "notes": "Define forbidden imports, layer rules, and circular dependency bans. Run in CI as blocking check.",
+          "pinningNotes": "Pin dependency-cruiser version in package.json devDependencies.",
+          "verification": "Run 'npx depcruise --validate' or equivalent. Verify architectural rules are documented and enforced."
+        }
+      },
       {
         "ciHints": {
           "azure-devops": {
@@ -523,7 +584,8 @@
           "type-checking",
           "unit-test-runner",
           "unit-test-reporter",
-          "dependency-security"
+          "dependency-security",
+          "dependency-update-automation"
         ],
         "notes": "Pin tool and runtime versions in CI and containers to avoid flaky differences across environments.",
         "step": 3,
@@ -551,5 +613,5 @@
   },
   "stack": "typescript-js",
   "stackLabel": "TypeScript / JavaScript",
-  "version": 1
+  "version": 2
 }

package/dist/config/standards.typescript-js.github-actions.json

@@ -397,6 +397,67 @@
       }
     ],
     "recommended": [
+      {
+        "ciHints": {
+          "github-actions": {
+            "job": "ci",
+            "notes": "CI hints are suggested mappings; adjust to your workflow structure."
+          }
+        },
+        "description": "Automate dependency updates using Renovate or Dependabot to keep dependencies current and reduce security exposure window.",
+        "id": "dependency-update-automation",
+        "label": "Dependency Update Automation",
+        "stack": {
+          "anyOfFiles": [
+            "renovate.json",
+            ".renovaterc.json",
+            "renovate.json5",
+            ".renovaterc.json5",
+            ".github/dependabot.yml"
+          ],
+          "exampleConfigFiles": [
+            "renovate.json",
+            ".github/dependabot.yml"
+          ],
+          "exampleTools": [
+            "renovate",
+            "dependabot"
+          ],
+          "notes": "Renovate supports GHA + AzDO (self-hosted or Mend Renovate App). Dependabot is GitHub-native only. For AzDO: use Renovate via self-hosted runner, Docker container job, or Mend's hosted service.",
+          "pinningNotes": "Pin Renovate Docker image version in AzDO pipelines for determinism.",
+          "verification": "Check for renovate.json (or .renovaterc.json) OR .github/dependabot.yml. Verify dependency update PRs are being created."
+        }
+      },
+      {
+        "ciHints": {
+          "github-actions": {
+            "job": "ci",
+            "notes": "CI hints are suggested mappings; adjust to your workflow structure."
+          }
+        },
+        "description": "Enforce module boundaries and import constraints to prevent architectural drift and unwanted coupling.",
+        "id": "dependency-architecture-rules",
+        "label": "Dependency Architecture Rules",
+        "stack": {
+          "anyOfFiles": [
+            ".dependency-cruiser.cjs",
+            ".dependency-cruiser.js",
+            "dependency-cruiser.config.cjs",
+            ".dependency-cruiser.mjs"
+          ],
+          "exampleConfigFiles": [
+            ".dependency-cruiser.cjs",
+            ".dependency-cruiser.js",
+            "dependency-cruiser.config.cjs"
+          ],
+          "exampleTools": [
+            "dependency-cruiser"
+          ],
+          "notes": "Define forbidden imports, layer rules, and circular dependency bans. Run in CI as blocking check.",
+          "pinningNotes": "Pin dependency-cruiser version in package.json devDependencies.",
+          "verification": "Run 'npx depcruise --validate' or equivalent. Verify architectural rules are documented and enforced."
+        }
+      },
       {
         "ciHints": {
           "github-actions": {
@@ -523,7 +584,8 @@
           "type-checking",
           "unit-test-runner",
           "unit-test-reporter",
-          "dependency-security"
+          "dependency-security",
+          "dependency-update-automation"
         ],
         "notes": "Pin tool and runtime versions in CI and containers to avoid flaky differences across environments.",
         "step": 3,
@@ -551,5 +613,5 @@
   },
   "stack": "typescript-js",
   "stackLabel": "TypeScript / JavaScript",
-  "version": 1
+  "version": 2
 }

package/dist/config/standards.typescript-js.json

@@ -445,6 +445,75 @@
       }
     ],
     "recommended": [
+      {
+        "ciHints": {
+          "azure-devops": {
+            "notes": "CI hints are suggested mappings; adjust to your pipeline topology.",
+            "stage": "quality"
+          },
+          "github-actions": {
+            "job": "ci",
+            "notes": "CI hints are suggested mappings; adjust to your workflow structure."
+          }
+        },
+        "description": "Automate dependency updates using Renovate or Dependabot to keep dependencies current and reduce security exposure window.",
+        "id": "dependency-update-automation",
+        "label": "Dependency Update Automation",
+        "stack": {
+          "anyOfFiles": [
+            "renovate.json",
+            ".renovaterc.json",
+            "renovate.json5",
+            ".renovaterc.json5",
+            ".github/dependabot.yml"
+          ],
+          "exampleConfigFiles": [
+            "renovate.json",
+            ".github/dependabot.yml"
+          ],
+          "exampleTools": [
+            "renovate",
+            "dependabot"
+          ],
+          "notes": "Renovate supports GHA + AzDO (self-hosted or Mend Renovate App). Dependabot is GitHub-native only. For AzDO: use Renovate via self-hosted runner, Docker container job, or Mend's hosted service.",
+          "pinningNotes": "Pin Renovate Docker image version in AzDO pipelines for determinism.",
+          "verification": "Check for renovate.json (or .renovaterc.json) OR .github/dependabot.yml. Verify dependency update PRs are being created."
+        }
+      },
+      {
+        "ciHints": {
+          "azure-devops": {
+            "notes": "CI hints are suggested mappings; adjust to your pipeline topology.",
+            "stage": "quality"
+          },
+          "github-actions": {
+            "job": "ci",
+            "notes": "CI hints are suggested mappings; adjust to your workflow structure."
+          }
+        },
+        "description": "Enforce module boundaries and import constraints to prevent architectural drift and unwanted coupling.",
+        "id": "dependency-architecture-rules",
+        "label": "Dependency Architecture Rules",
+        "stack": {
+          "anyOfFiles": [
+            ".dependency-cruiser.cjs",
+            ".dependency-cruiser.js",
+            "dependency-cruiser.config.cjs",
+            ".dependency-cruiser.mjs"
+          ],
+          "exampleConfigFiles": [
+            ".dependency-cruiser.cjs",
+            ".dependency-cruiser.js",
+            "dependency-cruiser.config.cjs"
+          ],
+          "exampleTools": [
+            "dependency-cruiser"
+          ],
+          "notes": "Define forbidden imports, layer rules, and circular dependency bans. Run in CI as blocking check.",
+          "pinningNotes": "Pin dependency-cruiser version in package.json devDependencies.",
+          "verification": "Run 'npx depcruise --validate' or equivalent. Verify architectural rules are documented and enforced."
+        }
+      },
       {
         "ciHints": {
           "azure-devops": {
@@ -584,7 +653,8 @@
           "type-checking",
           "unit-test-runner",
           "unit-test-reporter",
-          "dependency-security"
+          "dependency-security",
+          "dependency-update-automation"
         ],
         "notes": "Pin tool and runtime versions in CI and containers to avoid flaky differences across environments.",
         "step": 3,
@@ -612,5 +682,5 @@
   },
   "stack": "typescript-js",
   "stackLabel": "TypeScript / JavaScript",
-  "version": 1
+  "version": 2
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@oddessentials/repo-standards",
   "private": false,
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "Standards and CI filtering utilities for multi-stack repository governance.",
   "type": "module",
   "scripts": {