@red-hat-developer-hub/backstage-plugin-scorecard-backend-module-dependabot 0.4.0 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,66 @@
1
1
  # @red-hat-developer-hub/backstage-plugin-scorecard-backend-module-dependabot
2
2
 
3
+ ## 1.0.0
4
+
5
+ ### Major Changes
6
+
7
+ - 8c14679: **BREAKING**: Scorecard provider configuration now lives under top-level `scorecard.metricProviders` instead of `scorecard.plugins`. Provider IDs must be `<datasource>.<providerName>` (no longer equal to the datasource alone). Entity annotations for thresholds use now the full metric ID instead of provider ID.
8
+
9
+ Thresholds from configuration are determined by the most specific setting (**metric > provider**):
10
+
11
+ 1. `metricProviders.<datasource>.<providerName>.metrics.<metricName>.thresholds`
12
+ 2. `metricProviders.<datasource>.<providerName>.thresholds`
13
+
14
+ Config keys are local names (no datasource prefix). Entity annotations use the full metric ID:
15
+ `scorecard.io/<metricId>.thresholds.rules.<key>`.
16
+
17
+ Filecheck provider ID is now `filecheck.fileExistence`; files move under `options`:
18
+
19
+ ```diff
20
+ scorecard:
21
+ - plugins:
22
+ - filecheck:
23
+ - files:
24
+ - license: LICENSE
25
+ - codeowners: CODEOWNERS
26
+ - thresholds: ...
27
+ - schedule: ...
28
+ + metricProviders:
29
+ + filecheck:
30
+ + fileExistence:
31
+ + options:
32
+ + files:
33
+ + license: LICENSE
34
+ + codeowners: CODEOWNERS
35
+ + thresholds: ...
36
+ + schedule: ...
37
+ ```
38
+
39
+ Migration from the previous `scorecard.plugins` layout:
40
+
41
+ ```diff
42
+ scorecard:
43
+ - plugins:
44
+ + metricProviders:
45
+ github:
46
+ openPRs:
47
+ schedule: ...
48
+ thresholds: ...
49
+ ```
50
+
51
+ ### Patch Changes
52
+
53
+ - Updated dependencies [8c14679]
54
+ - @red-hat-developer-hub/backstage-plugin-scorecard-common@4.0.0
55
+ - @red-hat-developer-hub/backstage-plugin-scorecard-node@4.0.0
56
+
57
+ ## 0.4.1
58
+
59
+ ### Patch Changes
60
+
61
+ - @red-hat-developer-hub/backstage-plugin-scorecard-common@3.0.1
62
+ - @red-hat-developer-hub/backstage-plugin-scorecard-node@3.0.1
63
+
3
64
  ## 0.4.0
4
65
 
5
66
  ### Minor Changes
package/README.md CHANGED
@@ -15,7 +15,7 @@ All four severity metrics share the same default thresholds. Default thresholds
15
15
  ```yaml
16
16
  # app-config.yaml
17
17
  scorecard:
18
- plugins:
18
+ metricProviders:
19
19
  dependabot:
20
20
  alertsCritical:
21
21
  thresholds:
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@red-hat-developer-hub/backstage-plugin-scorecard-backend-module-dependabot",
3
- "version": "0.4.0",
3
+ "version": "1.0.0",
4
4
  "license": "Apache-2.0",
5
5
  "description": "The dependabot backend module for the scorecard plugin.",
6
6
  "main": "dist/index.cjs.js",
@@ -39,8 +39,8 @@
39
39
  "@backstage/config": "^1.3.8",
40
40
  "@backstage/integration": "^2.0.3",
41
41
  "@octokit/rest": "^19.0.3",
42
- "@red-hat-developer-hub/backstage-plugin-scorecard-common": "^3.0.0",
43
- "@red-hat-developer-hub/backstage-plugin-scorecard-node": "^3.0.0"
42
+ "@red-hat-developer-hub/backstage-plugin-scorecard-common": "^4.0.0",
43
+ "@red-hat-developer-hub/backstage-plugin-scorecard-node": "^4.0.0"
44
44
  },
45
45
  "devDependencies": {
46
46
  "@backstage/backend-test-utils": "^1.11.4",