skill.metadata.yaml

# Copyright © 2021 Atomist, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

parameter_groups:
  - name: whatToScan
    display_name: What to scan
  - name: auditFix
    display_name: Fixes
  - name: updates
    display_name: Updates

parameters:
  - name: includeDev
    group: whatToScan
    tooltip: By default this skill scans production dependencies. By selecting, you are also including all of your development dependendencies in the scan.
  - name: excludedPackages
    group: whatToScan
  - name: excludedAdvisoryIds
    group: whatToScan
  - name: repos
    group: whatToScan

  - name: level
    group: auditFix
  - name: push
    group: auditFix
    tooltip: This fix makes updates to dependencies in your `package.json` and `package-lock.json` files. When a security vulnerability is fixed manually and the pull request is no longer needed, it will be closed automatically.
  - name: labels
    group: auditFix
    condition:
      name: push
      values:
        - pr_default_commit
        - pr_default
        - pr
  - name: force
    group: auditFix
    tooltip: Force updates by installing semver-major updates to top-level dependencies, instead of semver-compatible updates.

  - name: updatePush
    group: updates
    tooltip: When there are no security vulnerabilities to fix, this skill can also find outdated dependencies and update the version automatically based on version constraints in `package.json` file.
  - name: updateLabels
    group: updates
    condition:
      name: updatePush
      values:
        - pr_default_commit
        - pr_default
        - pr