feat, ci: pin dependencies for CI, upgrading daily

.github/dependabot.yml

@@ -5,3 +5,44 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+      day-of-week: "friday"
+      time: "5:00"
+      timezone: "Europe/Amsterdam"
+
+  # Maintain dependencies for frontend packages
+  # These should already scan solara-widget-manager, since
+  # Those are dependencies
+  - package-ecosystem: "npm"
+    directory: "/packages/solara-vuetify-app"
+    schedule:
+      interval: "weekly"
+      day-of-week: "friday"
+      time: "5:00"
+      timezone: "Europe/Amsterdam"
+    ignore:
+      # Ignore Vuetify, since we're locked to a specific version
+      - dependency-name: "vuetify"
+        versions: ["2.x"]
+    labels:
+      - "javascript dependencies"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/solara-vuetify3-app"
+    schedule:
+      interval: "weekly"
+      day-of-week: "friday"
+      time: "5:00"
+      timezone: "Europe/Amsterdam"
+    labels:
+      - "javascript dependencies"
+
+  # Maintain dependencies for main python package
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day-of-week: "friday"
+      time: "5:00"
+      timezone: "Europe/Amsterdam"
+    labels:
+      - "python dependencies"

.github/workflows/codequality.yaml

@@ -1,17 +1,7 @@
 name: Code quality
 
 on:
-  push:
-    branches:
-      - master
-  pull_request:
-  workflow_dispatch:
-  schedule:
-    - cron: '0 6 * * 1,4'  # at 06:00 UTC on Monday and Thursday
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ !(github.ref == 'refs/heads/master') }}
+  workflow_call:
 
 jobs:
   code-quality:
@@ -37,5 +27,7 @@ jobs:
         run: black solara
       - name: Run flake8
         uses: suo/flake8-github-action@releases/v1
+        with:
+          checkName: 'code-quality'
       - name: mypy
         run: mypy solara