源码快照 @ 2026-09-01 (source-only, 剔除非源码素材)

.github/dependabot.yml

@@ -0,0 +1,51 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    groups:
+      minor-and-patch:
+        patterns:
+          - '*'
+        update-types:
+          - minor
+          - patch
+    # Retained from when an in-house Code Mode transpiler used the typescript
+    # JS API (transpileModule, ScriptTarget, …) at runtime and had to stay on
+    # 5.9, since the 6.0+ native compiler removed those exports. That
+    # transpiler is gone — @ai-sdk/code-mode owns transpilation now, and no
+    # workspace pins typescript — so this ignore no longer has a subject.
+    # Dropping it is a dependency-policy call, not this refactor's to make.
+    ignore:
+      - dependency-name: 'typescript'
+        versions:
+          - '>=6.0.0'
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 10
+    groups:
+      official-actions:
+        patterns:
+          - 'actions/*'