Merge pull request #406 from danskernesdigitalebibliotek/fix-dependab…

…ot-2

Fix dependabot round 2

.github/dependabot.yml

@@ -1,67 +1,75 @@
 # Dependabot configuration files that automate our dependency updates by creating pull requests.
 # The PRs are labeled and grouped by package ecosystem and semver update type.
+# We intentionally use grouping and pull request limits to avoid creating too many PRs and
+# exhausting the number of available pull requests in Lagoon.
 version: 2
 updates:
-- package-ecosystem: github-actions
-  directory: "/"
-  open-pull-requests-limit: 2
-  groups:
-    minor-github-actions-dependencies:
-      update-types:
-        - "minor"
-        - "patch"
-  schedule:
-    interval: weekly
-    timezone: Europe/Copenhagen
-  labels:
-    - "dependencies"
-    - "github_actions"
-- package-ecosystem: composer
-  directory: "/"
-  open-pull-requests-limit: 3
-  groups:
-    drupal-core-minor-major-releases:
-      patterns:
-        - "drupal/core*"
-      update-types:
-        - "major"
-        - "minor"
-    drupal-core-patch-releases:
-      patterns:
-        - "drupal/core*"
-      update-types:
-        - "patch"
-  schedule:
-    interval: weekly
-    timezone: Europe/Copenhagen
-  labels:
-    - "dependencies"
-    - "drupal"
-- package-ecosystem: composer
-  directory: "dev-scripts/"
-  open-pull-requests-limit: 2
-  groups:
-    minor-composer-dependencies:
-      update-types:
-        - "minor"
-        - "patch"
-  schedule:
-    interval: weekly
-    timezone: Europe/Copenhagen
-  labels:
-    - "dependencies"
-    - "dev-scripts"
-- package-ecosystem: npm
-  directory: "/"
-  open-pull-requests-limit: 2
-  groups:
-    minor-js-dependencies:
-      update-types:
-        - "minor"
-        - "patch"
-  schedule:
-    interval: weekly
-    timezone: Europe/Copenhagen
-  labels:
-    - "dependencies"
-    - "js-dependencies"
+  - package-ecosystem: github-actions
+    directory: "/"
+    open-pull-requests-limit: 2
+    groups:
+      minor-github-actions-dependencies:
+        update-types:
+          - "minor"
+          - "patch"
+    schedule:
+      interval: weekly
+      timezone: Europe/Copenhagen
+    labels:
+      - "dependencies"
+      - "github_actions"
+  - package-ecosystem: composer
+    directory: "/"
+    open-pull-requests-limit: 3
+    groups:
+      minor-composer-dependencies:
+        update-types:
+          - "minor"
+          - "patch"
+        exclude-patterns:
+          - "drupal/core*"
+      drupal-core-minor-major-releases:
+        patterns:
+          - "drupal/core*"
+        update-types:
+          - "major"
+          - "minor"
+      drupal-core-patch-releases:
+        patterns:
+          - "drupal/core*"
+        update-types:
+          - "patch"
+    schedule:
+      interval: weekly
+      timezone: Europe/Copenhagen
+    labels:
+      - "dependencies"
+      - "drupal"
+  - package-ecosystem: composer
+    directory: "/dev-scripts"
+    open-pull-requests-limit: 2
+    groups:
+      minor-composer-dependencies:
+        update-types:
+          - "minor"
+          - "patch"
+    schedule:
+      interval: weekly
+      timezone: Europe/Copenhagen
+    labels:
+      - "dependencies"
+      - "dev-scripts"
+  - package-ecosystem: npm
+    directory: "/"
+    open-pull-requests-limit: 2
+    groups:
+      minor-js-dependencies:
+        update-types:
+          - "minor"
+          - "patch"
+    schedule:
+      interval: weekly
+      timezone: Europe/Copenhagen
+    labels:
+      - "dependencies"
+      - "js-dependencies"

.github/workflows/lagoon.yml

@@ -21,6 +21,9 @@ jobs:
     name: Check environment
     runs-on: ubuntu-latest
     if: ${{ github.event.action == 'opened' || github.event.action == 'reopened' || github.event.action == 'synchronize' }}
+    permissions:
+      # Give the default GITHUB_TOKEN permission to create and update deployments
+      deployments: write
     steps:
       - name: Generate environment data
         id: environment
@@ -67,6 +70,9 @@ jobs:
     name: Close environment
     runs-on: ubuntu-latest
     if: ${{ github.event.action == 'closed' }}
+    permissions:
+      # Give the default GITHUB_TOKEN permission to close deployments.
+      deployments: write
     steps:
       - name: Generate environment data
         id: environment

.github/workflows/translate-source.yml

@@ -50,6 +50,9 @@ jobs:
     name: Publish translations to Github Pages
     runs-on: ubuntu-latest
     if: ${{ contains(github.event.head_commit.message, 'POEditor.com') }}
+    permissions:
+      # Give the default GITHUB_TOKEN permission to update GitHub Pages.
+      pages: write
     steps:
     - uses: actions/checkout@master
       with: