Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# Alerts only major updates for Packagist (Composer)
#
# Please see the documentation for all configuration options:
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file

version: 2
updates:
- package-ecosystem: "composer" # Specify the correct package ecosystem for PHP
directory: "/" # Location of package manifests
schedule:
interval: "weekly"
ignore:
- dependency-name: "*" # Ignore all dependencies for specific update types
update-types: ["version-update:semver-minor", "version-update:semver-patch"]
Comment on lines +13 to +14
Copy link

Copilot AI Jun 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

By ignoring minor and patch updates globally, you may miss critical security fixes often released as patches; consider allowing security-only patch updates or refining the ignore list.

Suggested change
- dependency-name: "*" # Ignore all dependencies for specific update types
update-types: ["version-update:semver-minor", "version-update:semver-patch"]
- dependency-name: "*" # Ignore all dependencies for minor and patch updates, except security updates
update-types: ["version-update:semver-minor"]
- dependency-name: "*" # Allow security-related patch updates
update-types: ["security"]

Copilot uses AI. Check for mistakes.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the version of the library, so it does not prevent the upgrade of applications that use it; it should be updated daily in applications where semver is protected, and the library dependencies should remain intact?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@copilot This is the version of the library, so it does not prevent the upgrade of applications that use it; it should be updated daily in applications where semver is protected, and the library dependencies should remain intact?

4 changes: 2 additions & 2 deletions composer.json
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,8 @@
}
],
"require": {
"php": "^8.0",
"fastly/fastly": "^1.0 || ^2.0 || ^3.0 || ^4.0 || ^5.0",
"php": "^8.1",
"fastly/fastly": "^10.0",
"guzzlehttp/guzzle": "^7.5",
"ray/di": "^2.13.1"
},
Expand Down
5 changes: 0 additions & 5 deletions src/FastlyCachePurgerInterface.php
Original file line number Diff line number Diff line change
Expand Up @@ -4,12 +4,7 @@

namespace BEAR\FastlyModule;

use Fastly\Api\PurgeApi;

interface FastlyCachePurgerInterface
{
/** @SuppressWarnings("PHPMD.BooleanArgumentFlag") */
public function __construct(PurgeApi $purgeApi, string $fastlyServiceId, bool $enableSoftPurge = false);

public function __invoke(string $tag): void;
}
Loading