Socket
Socket
Sign inDemoInstall

bb-npm-bot

Package Overview
Dependencies
108
Maintainers
1
Versions
43
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    bb-npm-bot

Manage NPM dependencies on Bitbucket


Version published
Weekly downloads
43
Maintainers
1
Install size
4.59 MB
Created
Weekly downloads
 

Readme

Source

bitbucket-npm-bot

A renovate-like service that works on Bitbucket Server.

Installation

npm install -g bb-npm-bot

Usage

bb-npm-bot --config=my/path/config.json --token=dXNlcm5hbWU6cGFzc3dvcmQ=

Options

OptionDescriptionTypeExamplesDefault
configa local or network path for your config fileString"my/path/config.json" "https://my-custom-server/config.json"
tokenYour Bitbucket auth tokenString"dXNlcm5hbWU6cGFzc3dvcmQ="

Docker

npm run docker-build
# the following command assumes env vars BB_CONFIG and BB_TOKEN are set to something like BB_CONFIG=/my/path/config.json and BB_TOKEN=dXNlcm5hbWU6cGFzc3dvcmQ=
npm run docker-run

Config

Server-level

This is your "config.json" top-level.

{
  "endpoint": "https://my-stash-server",
  "cachePath": "/override/cache/path",
  "user": "my-stash-bot-account",
  "repositories": [
    // ...
  ],
  "packages": [
    "mocha",
    // ...
  ],
  "versionHint": "~",
  "titleTemplate": "custom {{package}} {{oldRange}} {{newRange}}",
  "branchTemplate": "custom_{{package}}_{{oldVersion}}_{{newVersion}}",
  "descriptionTemplate": "custom {{package}} {{oldRange}} {{newRange}} {{oldVersion}} {{newVersion}}"
}

Repo-level

This is an item inside the "repositories" array from above.

{
  "project": "my-project",
  "name": "my-repo",
  "packages": [
    "lodash",
    // ...
  ]
}

Local-level

This is a file called ".bb-npm.js" checked in to the repository.

{
  "packages": [
    "rimraf",
    // ...
  ]
}

These objects are all merged when determining how to update your project.

OptionDescriptionTypeExamplesRequiredDefault
endpointYour private Stash serverString"https://my-stash-server"
cachePathProvide an alternative cache to clone and update depsString"/my/temp/dir"your OS tmp dir + "bb-npm-bot-cache"
userThe user submitting the pull requests. This must match the user from your auth token.String"my-bot-account"
repositoriesA list of repositories to watch and their settingsObject
packagesA list of packages to watch. Leave blank to watch all.Array of Strings"mocha" "lodash"
versionHintSpecify a range. Leave blank to keep the existing range.String"" "~" "^"
titleTemplateOverride the title using a templateString"custom {{package}} {{oldRange}} {{newRange}}""{{package}} {{oldRange}} => {{newRange}}"
branchTemplateOverride the branch name using a templateString"custom_{{package}}{{oldVersion}}{{newVersion}}""bb/{{package}}_{{newVersion}}"
descriptionTemplateOverride the description using a templateString"custom {{package}} {{oldRange}} {{newRange}} {{oldVersion}} {{newVersion}}""test description"
projectName of the project or user. Prefix with "~" if it is a user.String"my-project" "~my-user"
nameName of the repositoryString"my-repo"
disabledDisable processingBooleanfalse

FAQs

Last updated on 04 Feb 2019

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc