@red-hat-developer-hub/backstage-plugin-scorecard-backend-module-dependabot 0.4.1 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,67 @@
1
1
  # @red-hat-developer-hub/backstage-plugin-scorecard-backend-module-dependabot
2
2
 
3
+ ## 1.0.1
4
+
5
+ ### Patch Changes
6
+
7
+ - Updated dependencies [3af0fb2]
8
+ - @red-hat-developer-hub/backstage-plugin-scorecard-common@4.1.0
9
+ - @red-hat-developer-hub/backstage-plugin-scorecard-node@4.1.0
10
+
11
+ ## 1.0.0
12
+
13
+ ### Major Changes
14
+
15
+ - 8c14679: **BREAKING**: Scorecard provider configuration now lives under top-level `scorecard.metricProviders` instead of `scorecard.plugins`. Provider IDs must be `<datasource>.<providerName>` (no longer equal to the datasource alone). Entity annotations for thresholds use now the full metric ID instead of provider ID.
16
+
17
+ Thresholds from configuration are determined by the most specific setting (**metric > provider**):
18
+
19
+ 1. `metricProviders.<datasource>.<providerName>.metrics.<metricName>.thresholds`
20
+ 2. `metricProviders.<datasource>.<providerName>.thresholds`
21
+
22
+ Config keys are local names (no datasource prefix). Entity annotations use the full metric ID:
23
+ `scorecard.io/<metricId>.thresholds.rules.<key>`.
24
+
25
+ Filecheck provider ID is now `filecheck.fileExistence`; files move under `options`:
26
+
27
+ ```diff
28
+ scorecard:
29
+ - plugins:
30
+ - filecheck:
31
+ - files:
32
+ - license: LICENSE
33
+ - codeowners: CODEOWNERS
34
+ - thresholds: ...
35
+ - schedule: ...
36
+ + metricProviders:
37
+ + filecheck:
38
+ + fileExistence:
39
+ + options:
40
+ + files:
41
+ + license: LICENSE
42
+ + codeowners: CODEOWNERS
43
+ + thresholds: ...
44
+ + schedule: ...
45
+ ```
46
+
47
+ Migration from the previous `scorecard.plugins` layout:
48
+
49
+ ```diff
50
+ scorecard:
51
+ - plugins:
52
+ + metricProviders:
53
+ github:
54
+ openPRs:
55
+ schedule: ...
56
+ thresholds: ...
57
+ ```
58
+
59
+ ### Patch Changes
60
+
61
+ - Updated dependencies [8c14679]
62
+ - @red-hat-developer-hub/backstage-plugin-scorecard-common@4.0.0
63
+ - @red-hat-developer-hub/backstage-plugin-scorecard-node@4.0.0
64
+
3
65
  ## 0.4.1
4
66
 
5
67
  ### Patch Changes
package/README.md CHANGED
@@ -15,7 +15,7 @@ All four severity metrics share the same default thresholds. Default thresholds
15
15
  ```yaml
16
16
  # app-config.yaml
17
17
  scorecard:
18
- plugins:
18
+ metricProviders:
19
19
  dependabot:
20
20
  alertsCritical:
21
21
  thresholds:
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@red-hat-developer-hub/backstage-plugin-scorecard-backend-module-dependabot",
3
- "version": "0.4.1",
3
+ "version": "1.0.1",
4
4
  "license": "Apache-2.0",
5
5
  "description": "The dependabot backend module for the scorecard plugin.",
6
6
  "main": "dist/index.cjs.js",
@@ -39,8 +39,8 @@
39
39
  "@backstage/config": "^1.3.8",
40
40
  "@backstage/integration": "^2.0.3",
41
41
  "@octokit/rest": "^19.0.3",
42
- "@red-hat-developer-hub/backstage-plugin-scorecard-common": "^3.0.1",
43
- "@red-hat-developer-hub/backstage-plugin-scorecard-node": "^3.0.1"
42
+ "@red-hat-developer-hub/backstage-plugin-scorecard-common": "^4.1.0",
43
+ "@red-hat-developer-hub/backstage-plugin-scorecard-node": "^4.1.0"
44
44
  },
45
45
  "devDependencies": {
46
46
  "@backstage/backend-test-utils": "^1.11.4",