Bump sourcecred from 0.9.0 to 0.10.0

[dependabot]

Bumps sourcecred from 0.9.0 to 0.10.0.

Release notes

Sourced from sourcecred's releases.

sourcecred v0.10.0

Breaking Changes

The below Grain Config format change is breaking for many instances. Fortunately, we included an updater. To use:

1. Check out the dependabot branch locally (or manually update the sourcecred version in your instance's package.json)
2. Run yarn sourcecred update
3. Commit and push changes, including changes to the file data/updater.txt

Summary

[Affects Cred] Discord skips zero-weighted channels

Before, the only way to fully exclude channels from the load and graph steps was to wrestle the bot's permissions. Now, channels with a weight of 0 (explicitly or using defaultWeight) will not be loaded. This should improve performance significantly for instances with zero-weighted channels. This may affect cred scores slightly.

[Affects Cred] Discord Graph Simplification

Now the Discord plugin excludes messages that don't have any positively weighted reactions attached. This will improve performance, and may also affect cred scores slightly.

Grain Config format change

Months ago, we introduced the option to configure your grain distributions using an array format in the attribute allocationPolicies. In this release, we are deprecating the old format in favor of the new. See the Breaking Changes note above to easily reformat your existing grain.json

Discord Channel Category Weights

Now, you can set a weight for a discord channel category, which will be used if a channel's weight is not explicitly set. To do so, simply add the category's ID into the same channelWeightConfig.weights array that you use to configure channel weights.

Recent Policy Exclusions

Many communities have salaried employees, which can complicate their use of SourceCred since they don't want people double-dipping. Now, you can pay salaried employees directly through SourceCred by adding a SPECIAL distribution for that employee and adding them to the new exclusions attribute on the RECENT distribution. This allows SourceCred's BALANCED policy to do smarter accounting and even pay salaried employees if their contributions exceed their salary. This also improves transparency in the community.

Example grain.json

{
  "maxSimultaneousDistributions": 100,
  "allocationPolicies": [
    {
      "policyType": "SPECIAL",
      "budget": 100,
      "memo": "Ongoing salary for Garnet's full-time community organizing contributions",
      "recipient": "6wyPOVWLmZ2b35eCmOrz1w"
    },
    {
      "policyType": "RECENT",
      "budget": 100,
      "discount": 0.16,
      "exclusions": ["6wyPOVWLmZ2b35eCmOrz1w"]
    },
    {
      "policyType": "BALANCED",
      "budget": 100,
      "numIntervalsLookback": 0
    }
  ]
}

... (truncated)

Commits

• a03e596 Bump sourcecred version to 0.10.0 (#3229)
• 1c31ba1 Bugfix: use discord user id if the name is all special characters (#3223)
• b2bfd16 Support Sorting in Current Balance and Earned Column. (#3227)
• d229426 build(deps): bump url-parse from 1.4.7 to 1.5.3 in /packages/sourcecred (#3123)
• 0eb1344 build(deps): bump tmpl from 1.0.4 to 1.0.5 in /packages/sourcecred (#3196)
• bd4c9b8 build(deps): bump postcss from 8.2.9 to 8.3.9 in /packages/sourcecred (#3228)
• d936a97 build(deps): bump better-sqlite3 from 7.3.1 to 7.4.0 (#3041)
• 5dbf77d build(deps): bump dns-packet from 1.3.1 to 1.3.4 (#3072)
• af44a5f build(deps): bump hosted-git-info in /packages/sourcecred (#3052)
• 18960bd build(deps): bump handlebars from 4.7.6 to 4.7.7 in /packages/sourcecred (#3053)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by hozz, a new releaser for sourcecred since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #50.