Skip to content

Commit

Permalink
Fix changelog ordering
Browse files Browse the repository at this point in the history
  • Loading branch information
svengreb committed Apr 1, 2021
1 parent aac8bab commit 20604a7
Showing 1 changed file with 22 additions and 22 deletions.
44 changes: 22 additions & 22 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,28 +12,6 @@

## Improvements

<details>
<summary><strong>Reduce Dependabot PR noise for NPM package ecosystem</strong> — #65 ⇄ #66 (⊶ 32925a1f)</summary>

↠ To reduce the noise of too many PRs from NPM dependencies, where most of them are only scoped for (local) development, two optimizations have been made:

1. The schedule changed to the [`monthly` interval][gh-docs-dep_updates#schedule_interval]. This is still enough to keep up with the fast updates in the NPM ecosystem.
2. Only watch **production** packages (`dependencies`) and **ignore development packages** (`devDependencies`). The packages used for local or CI/CD development purposes are not required to be the latest version just for the sake of being up-to-date without a specific need or benefit.

Since [GitHub takes security really serious][gh-feat-sec], important Dependabot [security updates][gh-docs-dep_sec_updates] are triggered manually by a security advisor so there is no risk of missing important versions bumps when reducing the schedule interval.

> Use the `allow` option to customize which dependencies are updated. This has no impact on security updates for vulnerable dependencies.
</details>

# 0.8.0

![Release Date: 2020-12-12](https://img.shields.io/static/v1?style=flat-square&label=Release%20Date&message=2020-12-12&colorA=4c566a&colorB=88c0d0) [![Project Board](https://img.shields.io/static/v1?style=flat-square&label=Project%20Board&message=0.8.0&logo=github&logoColor=eceff4&colorA=4c566a&colorB=88c0d0)](https://github.com/svengreb/tmpl/projects/11) [![Milestone](https://img.shields.io/static/v1?style=flat-square&label=Milestone&message=0.8.0&logo=github&logoColor=eceff4&colorA=4c566a&colorB=88c0d0)](https://github.com/svengreb/tmpl/milestone/8)

[Show all commits][gh-compare-tag-v0.7.0_v0.8.0]

## Improvements

<details>
<summary><strong>From npm to Yarn and back again</strong> — #72 ⇄ #73 (⊶ b9967864)</summary>

Expand Down Expand Up @@ -107,6 +85,28 @@ In conclusion, the usage of lockfiles in a non-end-user project can be well summ

</details>

# 0.8.0

![Release Date: 2020-12-12](https://img.shields.io/static/v1?style=flat-square&label=Release%20Date&message=2020-12-12&colorA=4c566a&colorB=88c0d0) [![Project Board](https://img.shields.io/static/v1?style=flat-square&label=Project%20Board&message=0.8.0&logo=github&logoColor=eceff4&colorA=4c566a&colorB=88c0d0)](https://github.com/svengreb/tmpl/projects/11) [![Milestone](https://img.shields.io/static/v1?style=flat-square&label=Milestone&message=0.8.0&logo=github&logoColor=eceff4&colorA=4c566a&colorB=88c0d0)](https://github.com/svengreb/tmpl/milestone/8)

[Show all commits][gh-compare-tag-v0.7.0_v0.8.0]

## Improvements

<details>
<summary><strong>Reduce Dependabot PR noise for NPM package ecosystem</strong> — #65 ⇄ #66 (⊶ 32925a1f)</summary>

↠ To reduce the noise of too many PRs from NPM dependencies, where most of them are only scoped for (local) development, two optimizations have been made:

1. The schedule changed to the [`monthly` interval][gh-docs-dep_updates#schedule_interval]. This is still enough to keep up with the fast updates in the NPM ecosystem.
2. Only watch **production** packages (`dependencies`) and **ignore development packages** (`devDependencies`). The packages used for local or CI/CD development purposes are not required to be the latest version just for the sake of being up-to-date without a specific need or benefit.

Since [GitHub takes security really serious][gh-feat-sec], important Dependabot [security updates][gh-docs-dep_sec_updates] are triggered manually by a security advisor so there is no risk of missing important versions bumps when reducing the schedule interval.

> Use the `allow` option to customize which dependencies are updated. This has no impact on security updates for vulnerable dependencies.
</details>

## Tasks

<details>
Expand Down

0 comments on commit 20604a7

Please sign in to comment.