Merge pull request 'chore(deps): update dependency core-js to v3.46.0' (!191) from renovate/core-js-3.x into main

Reviewed-on: #191

.drone.yml

@@ -15,24 +15,27 @@ trigger:
 
 steps:
   - name: reuse
-    image: fsfe/reuse:3.0.2-debian
+    image: fsfe/reuse:5.1.1-debian@sha256:1efdf3027655223f58f45338c114b937e793363cf1bf6b8857a433f1757f5956
   - name: lint
-    image: node:20.12.2
+    image: node:20.19.5-alpine@sha256:1ab6fc5a31d515dc7b6b25f6acfda2001821f2c2400252b6cb61044bd9f9ad48
     commands:
       - npm ci
-      - npm run lint
+      - npm run lint -- --no-fix
   - name: audit
-    image: node:20.12.2
+    image: node:20.19.5-alpine@sha256:1ab6fc5a31d515dc7b6b25f6acfda2001821f2c2400252b6cb61044bd9f9ad48
     commands:
       - npm install -g better-npm-audit
       - better-npm-audit audit --production --level=moderate
   - name: docker-dry-run
-    image: plugins/docker:20.17.3
+    image: plugins/docker:20.18.8@sha256:a76718f24f2bd68b132c43e57142d1f757cacd0ebe750238861d45cc74b1a391
     settings:
       registry: git.wtf-eg.de
       repo: git.wtf-eg.de/kompetenzinventar/frontend
       target: ki-frontend
       dry_run: true
+    when:
+      event:
+        - pull_request
 
 ---
 kind: pipeline
@@ -50,7 +53,7 @@ depends_on:
 
 steps:
   - name: docker-publish
-    image: plugins/docker:20.17.3
+    image: plugins/docker:20.18.8@sha256:a76718f24f2bd68b132c43e57142d1f757cacd0ebe750238861d45cc74b1a391
     settings:
       registry: git.wtf-eg.de
       repo: git.wtf-eg.de/kompetenzinventar/frontend
@@ -77,7 +80,7 @@ depends_on:
 
 steps:
   - name: deploy-dev
-    image: appleboy/drone-ssh:1.7.5
+    image: appleboy/drone-ssh:1.7.5@sha256:995677e073454912f26d4c0fdd2f9df2e1f5a30d6603d3f2ece667311b6babb3
     settings:
       host:
         - dev01.wtf-eg.net
@@ -99,14 +102,14 @@ trigger:
 
 steps:
   - name: reuse
-    image: fsfe/reuse:3.0.2-debian
+    image: fsfe/reuse:5.1.1-debian@sha256:1efdf3027655223f58f45338c114b937e793363cf1bf6b8857a433f1757f5956
   - name: lint
-    image: node:20.12.2
+    image: node:20.19.5-alpine@sha256:1ab6fc5a31d515dc7b6b25f6acfda2001821f2c2400252b6cb61044bd9f9ad48
     commands:
       - npm ci
-      - npm run lint
+      - npm run lint -- --no-fix
   - name: docker-publish
-    image: plugins/docker:20.17.3
+    image: plugins/docker:20.18.8@sha256:a76718f24f2bd68b132c43e57142d1f757cacd0ebe750238861d45cc74b1a391
     settings:
       registry: git.wtf-eg.de
       repo: git.wtf-eg.de/kompetenzinventar/frontend

.reuse/dep5

@@ -1,28 +0,0 @@
-Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: ki-frontend
-Upstream-Contact: Scammo <kontakt@samuelbrinkmann.de>
-Source: https://git.wtf-eg.de/kompetenzinventar/ki-frontend
-
-Files: package.json package-lock.json renovate.json
-Copyright: WTF Kooperative eG <https://wtf-eg.de/>
-License: AGPL-3.0-or-later
-
-Files: .browserslistrc .dockerignore .eslintrc.js .gitignore
-Copyright: WTF Kooperative eG <https://wtf-eg.de/>
-License: AGPL-3.0-or-later
-
-Files: src/assets/img/wtf*
-Copyright: WTF Kooperative eG <https://wtf-eg.de/>
-License: LicenseRef-WTF
-
-Files: src/assets/language_level.json src/assets/skill_level.json
-Copyright: WTF Kooperative eG <https://wtf-eg.de/>
-License: AGPL-3.0-or-later
-
-Files: public/img/bootstrap-icons-1.5.0/*
-Copyright: Copyright (c) 2019-2020 The Bootstrap Authors
-License: MIT
-
-Files: public/fonts/Lato*
-Copyright: 2010-2015, Łukasz Dziedzic (dziedzic@typoland.com)
-License: OFL-1.1-RFN

Dockerfile

@@ -2,7 +2,7 @@
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 
-FROM node:20.12.2-alpine as builder
+FROM node:20.19.5-alpine@sha256:1ab6fc5a31d515dc7b6b25f6acfda2001821f2c2400252b6cb61044bd9f9ad48 as builder
 
 COPY package.json package-lock.json ./
 RUN npm install
@@ -15,7 +15,7 @@ COPY src src
 RUN npm ci && npm run build
 
 
-FROM nginx:1.24-alpine as ki-frontend
+FROM nginx:1.29-alpine@sha256:7c1b9a91514d1eb5288d7cd6e91d9f451707911bfaea9307a3acbc811d4aa82e as ki-frontend
 
 LABEL org.opencontainers.image.source=https://git.wtf-eg.de/kompetenzinventar/ki-frontend.git
 LABEL org.opencontainers.image.url=https://git.wtf-eg.de/kompetenzinventar/ki-frontend

REUSE.toml

@@ -0,0 +1,40 @@
+version = 1
+SPDX-PackageName = "ki-frontend"
+SPDX-PackageSupplier = "Scammo <kontakt@samuelbrinkmann.de>"
+SPDX-PackageDownloadLocation = "https://git.wtf-eg.de/kompetenzinventar/ki-frontend"
+
+[[annotations]]
+path = ["package.json", "package-lock.json", "renovate.json"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "WTF Kooperative eG <https://wtf-eg.de/>"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+[[annotations]]
+path = [".browserslistrc", ".dockerignore", ".eslintrc.js", ".gitignore", "REUSE.toml"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "WTF Kooperative eG <https://wtf-eg.de/>"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+[[annotations]]
+path = "src/assets/img/wtf**"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "WTF Kooperative eG <https://wtf-eg.de/>"
+SPDX-License-Identifier = "LicenseRef-WTF"
+
+[[annotations]]
+path = ["src/assets/language_level.json", "src/assets/skill_level.json"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "WTF Kooperative eG <https://wtf-eg.de/>"
+SPDX-License-Identifier = "AGPL-3.0-or-later"
+
+[[annotations]]
+path = "public/img/bootstrap-icons-1.5.0/**"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "Copyright (c) 2019-2020 The Bootstrap Authors"
+SPDX-License-Identifier = "MIT"
+
+[[annotations]]
+path = "public/fonts/Lato**"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2010-2015, Łukasz Dziedzic (dziedzic@typoland.com)"
+SPDX-License-Identifier = "OFL-1.1-RFN"

package.json

@@ -7,22 +7,25 @@
     "lint": "vue-cli-service lint"
   },
   "devDependencies": {
-    "@babel/eslint-parser": "7.23.10",
-    "@vue/cli-plugin-babel": "~5.0.8",
-    "@vue/cli-plugin-eslint": "~5.0.8",
-    "@vue/cli-plugin-router": "~5.0.8",
-    "@vue/cli-service": "~5.0.8",
-    "@vue/compiler-sfc": "^3.4.19",
-    "bootstrap": "^5.3.3",
-    "bootstrap-icons": "^1.11.3",
-    "core-js": "^3.38.1",
-    "eslint": "^7.32.0",
-    "eslint-plugin-vue": "^9.27.0",
-    "sass": "^1.77.8",
-    "sass-loader": "^14.2.1",
-    "v-tooltip": "^4.0.0-beta.17",
-    "vue": "^3.4.0",
-    "vue-router": "^4.4.3",
-    "vuex": "^4.1.0"
+    "@babel/eslint-parser": "7.28.4",
+    "@vue/cli-plugin-babel": "5.0.9",
+    "@vue/cli-plugin-eslint": "5.0.9",
+    "@vue/cli-plugin-router": "5.0.9",
+    "@vue/cli-service": "5.0.9",
+    "@vue/compiler-sfc": "3.5.22",
+    "bootstrap": "5.3.8",
+    "bootstrap-icons": "1.13.1",
+    "core-js": "3.46.0",
+    "eslint": "8.57.1",
+    "eslint-plugin-vue": "9.33.0",
+    "sass": "1.93.2",
+    "sass-loader": "16.0.5",
+    "v-tooltip": "4.0.0-beta.17",
+    "vue": "3.5.22",
+    "vue-router": "4.5.1",
+    "vuex": "4.1.0"
+  },
+  "optionalDependencies": {
+    "sass-embedded": "1.93.2"
   }
 }

renovate.json

@@ -2,9 +2,11 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:best-practices",
+    "group:allDigest",
     "group:linters",
     "group:test",
     "npm:unpublishSafe",
+    "schedule:daily",
     ":disableDependencyDashboard",
     ":maintainLockFilesWeekly",
     ":pinAllExceptPeerDependencies",