chore: updates to dev-deps and QOL improvements

.github/dependabot.yml

@@ -1,27 +1,26 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
 version: 2
 updates:
-  - package-ecosystem: pip
-    directory: /
-    schedule:
-      interval: daily
-    # Raise pull requests for version updates
-    # to pip against the `develop` branch
-    target-branch: fix/update-package-json-INT-122
-    # Labels on pull requests for version updates only
-    labels:
-      - pip dependencies
-
   - package-ecosystem: npm
     directory: /
     schedule:
-      interval: weekly
-      # Check for npm updates on Sundays
-      day: sunday
-    # Labels on pull requests for security and version updates
+      interval: daily
+      time: '04:00'
+    commit-message:
+      prefix: fix
+      prefix-development: chore
+      include: scope
     labels:
-      - npm dependencies
+      - dependabot
+    groups:
+      security-updates:
+        patterns:
+          - '*'
+        exclude-patterns:
+          - 'storyblok*'
+        update-types:
+          - patch
+    ignore:
+      - dependency-name: '*'
+        update-types:
+          - version-update:semver-minor
+          - version-update:semver-major

.github/workflows/dependabot-autoapprove.yml

@@ -0,0 +1,28 @@
+name: Dependabot auto-approve
+on: pull_request
+
+permissions:
+  pull-requests: write
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'storyblok/storyblok-react'
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v2
+        with:
+          github-token: '${{ secrets.GITHUB_TOKEN }}'
+          alert-lookup: true
+      - uses: actions/checkout@v4
+      - name: Approve a PR if not already approved
+        run: |
+          gh pr checkout "$PR_URL" # sets the upstream metadata for `gh pr status`
+          if [ "$(gh pr status --json reviewDecision -q .currentBranch.reviewDecision)" != "APPROVED" ];
+          then gh pr review --approve "$PR_URL"
+          else echo "PR already approved, skipping additional approvals to minimize emails/notification noise.";
+          fi
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

package.json

@@ -1,7 +1,7 @@
 {
   "name": "storyblok-js-client",
-  "version": "6.10.1",
-  "packageManager": "[email protected].0",
+  "version": "6.10.6",
+  "packageManager": "[email protected].2",
   "description": "Universal JavaScript SDK for Storyblok's API",
   "author": "Alexander Feiglstorfer <[email protected]>",
   "license": "MIT",
@@ -65,18 +65,15 @@
     "@commitlint/config-conventional": "^19.6.0",
     "@storyblok/eslint-config": "^0.3.0",
     "@tsconfig/recommended": "^1.0.8",
-    "@typescript-eslint/eslint-plugin": "^8.18.1",
-    "@typescript-eslint/parser": "^8.18.1",
     "@vitest/coverage-v8": "^2.1.8",
     "@vitest/ui": "^2.1.8",
     "eslint": "^9.17.0",
     "eslint-config-prettier": "^9.1.0",
-    "isomorphic-fetch": "^3.0.0",
     "kolorist": "^1.8.0",
     "prettier": "^3.4.2",
     "simple-git-hooks": "^2.11.1",
     "typescript": "^5.7.2",
-    "vite": "^5.4.11",
+    "vite": "^6.0.6",
     "vite-plugin-banner": "^0.8.0",
     "vite-plugin-dts": "^4.4.0",
     "vitest": "^2.1.8"
@@ -100,7 +97,10 @@
   "commitlint": {
     "extends": [
       "@commitlint/config-conventional"
-    ]
+    ],
+    "rules": {
+      "body-max-line-length": [2, "always", 200]
+    }
   },
   "simple-git-hooks": {
     "pre-commit": "pnpm lint",