Library refactor

.github/dependabot-simple.yml

@@ -0,0 +1,97 @@
+# Simplified Dependabot configuration for nginx-defender
+# This is a more conservative approach with fewer update frequencies
+
+version: 2
+updates:
+  # Main Go project - most critical
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "Anipaleja"
+    commit-message:
+      prefix: "deps"
+    labels:
+      - "dependencies"
+      - "security"
+    # Group related updates together
+    groups:
+      security-updates:
+        patterns:
+          - "*"
+        update-types:
+          - "security"
+      minor-updates:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+
+  # Library package - second priority
+  - package-ecosystem: "gomod"
+    directory: "/lib"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "10:00"
+    open-pull-requests-limit: 3
+    reviewers:
+      - "Anipaleja"
+    commit-message:
+      prefix: "deps(lib)"
+    labels:
+      - "dependencies"
+      - "library"
+
+  # Language bindings - monthly updates
+  - package-ecosystem: "npm"
+    directory: "/bindings/nodejs"
+    schedule:
+      interval: "monthly"
+      day: "first-monday"
+    open-pull-requests-limit: 3
+    commit-message:
+      prefix: "deps(nodejs)"
+    labels:
+      - "dependencies"
+      - "nodejs"
+
+  - package-ecosystem: "pip"
+    directory: "/bindings/python"
+    schedule:
+      interval: "monthly"
+      day: "first-monday"
+    open-pull-requests-limit: 3
+    commit-message:
+      prefix: "deps(python)"
+    labels:
+      - "dependencies"
+      - "python"
+
+  # Infrastructure updates
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 2
+    commit-message:
+      prefix: "deps(docker)"
+    labels:
+      - "dependencies"
+      - "docker"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 2
+    commit-message:
+      prefix: "deps(ci)"
+    labels:
+      - "dependencies"
+      - "github-actions"

.github/dependabot.yml

@@ -3,6 +3,9 @@
 
 version: 2
 updates:
+
+  # Core Go project - highest priority
+
   # Go modules
   - package-ecosystem: "gomod"
     directory: "/"
@@ -11,12 +14,63 @@ updates:
       day: "monday"
       time: "09:00"
       timezone: "America/New_York"
+
+    open-pull-requests-limit: 8
+    reviewers:
+      - "Anipaleja"
+    assignees:
+      - "Anipaleja"
+    commit-message:
+      prefix: "deps"
+      prefix-development: "deps-dev"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "go"
+      - "security"
+    # Group security updates together
+    groups:
+      security-updates:
+        patterns:
+          - "*"
+        update-types:
+          - "patch"
+          - "minor"
+      go-major-updates:
+        patterns:
+          - "golang.org/x/*"
+          - "github.com/sirupsen/logrus"
+          - "github.com/gorilla/*"
+        update-types:
+          - "major"
+
+  # Library package - critical for users
+  - package-ecosystem: "gomod"
+    directory: "/lib"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "10:00"
+      timezone: "America/New_York"
+
     target-branch: "main"
+
     open-pull-requests-limit: 5
     reviewers:
       - "Anipaleja"
     assignees:
       - "Anipaleja"
+
+    commit-message:
+      prefix: "deps(lib)"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "library"
+      - "go"
+
+  # Python bindings
+
     labels:
       - "dependencies"
       - "go"
@@ -30,16 +84,40 @@ updates:
       day: "tuesday"
       time: "09:00"
       timezone: "America/New_York"
+
+
     target-branch: "main"
+
     open-pull-requests-limit: 5
     reviewers:
       - "Anipaleja"
     assignees:
       - "Anipaleja"
+    commit-message:
+      prefix: "deps(python)"
+      include: "scope"
+
     labels:
       - "dependencies"
       - "python"
       - "bindings"
+    allow:
+      # Be conservative with Python updates
+      - dependency-type: "direct"
+      - dependency-type: "indirect"
+    groups:
+      flask-ecosystem:
+        patterns:
+          - "flask*"
+          - "werkzeug"
+          - "jinja2"
+      django-ecosystem:
+        patterns:
+          - "django*"
+          - "djangorestframework"
+
+  # Node.js bindings
+
 
   # Node.js dependencies
   - package-ecosystem: "npm"
@@ -49,17 +127,37 @@ updates:
       day: "tuesday"
       time: "10:00"
       timezone: "America/New_York"
+
     target-branch: "main"
+
     open-pull-requests-limit: 5
     reviewers:
       - "Anipaleja"
     assignees:
       - "Anipaleja"
+
+    commit-message:
+      prefix: "deps(nodejs)"
+      include: "scope"
+
     labels:
       - "dependencies"
       - "nodejs"
       - "bindings"
 
+    groups:
+      dev-dependencies:
+        patterns:
+          - "@types/*"
+          - "typescript"
+          - "jest"
+        dependency-type: "development"
+      runtime-dependencies:
+        patterns:
+          - "axios"
+          - "*"
+        dependency-type: "production"
+
   # Docker base images
   - package-ecosystem: "docker"
     directory: "/"
@@ -68,12 +166,21 @@ updates:
       day: "wednesday"
       time: "09:00"
       timezone: "America/New_York"
+
+
     target-branch: "main"
+
     open-pull-requests-limit: 3
     reviewers:
       - "Anipaleja"
     assignees:
       - "Anipaleja"
+
+    commit-message:
+      prefix: "deps(docker)"
+      include: "scope"
+
+
     labels:
       - "dependencies"
       - "docker"
@@ -87,13 +194,68 @@ updates:
       day: "wednesday"
       time: "10:00"
       timezone: "America/New_York"
+
+
     target-branch: "main"
+
     open-pull-requests-limit: 3
     reviewers:
       - "Anipaleja"
     assignees:
       - "Anipaleja"
+
+    commit-message:
+      prefix: "deps(actions)"
+      include: "scope"
+
+
     labels:
       - "dependencies"
       - "github-actions"
       - "ci"
+
+
+  # Example projects (less frequent updates)
+  - package-ecosystem: "gomod"
+    directory: "/examples/basic"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 2
+    reviewers:
+      - "Anipaleja"
+    commit-message:
+      prefix: "deps(examples)"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "examples"
+
+  - package-ecosystem: "gomod"
+    directory: "/examples/advanced"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 2
+    reviewers:
+      - "Anipaleja"
+    commit-message:
+      prefix: "deps(examples)"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "examples"
+
+  - package-ecosystem: "gomod"
+    directory: "/examples/middleware"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 2
+    reviewers:
+      - "Anipaleja"
+    commit-message:
+      prefix: "deps(examples)"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "examples"
+
+main

bindings/python/requirements-dev.txt

@@ -0,0 +1,5 @@
+pytest>=7.0.0
+pytest-cov>=4.0.0
+black>=23.0.0
+flake8>=6.0.0
+mypy>=1.0.0

bindings/python/requirements.txt

@@ -0,0 +1,6 @@
+requests>=2.28.0
+psutil>=5.9.0
+pyyaml>=6.0
+flask>=2.3.0
+django>=4.2.0
+fastapi>=0.100.0