diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 645c171..ba88677 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,10 +1,48 @@ version: 2 + updates: + # Python dependencies (requirements.txt / setup.cfg / pyproject.toml) - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" + day: "sunday" + time: "06:00" + timezone: "America/Los_Angeles" + open-pull-requests-limit: 10 + labels: + - "dependencies" + - "security" + commit-message: + prefix: "deps(pip)" + include: "scope" + rebase-strategy: "auto" + # Optional: group non-breaking updates to reduce PR noise + groups: + python-minor-and-patch: + applies-to: "version-updates" + update-types: + - "minor" + - "patch" + + # GitHub Actions workflow dependencies - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" + day: "sunday" + time: "06:15" + timezone: "America/Los_Angeles" + open-pull-requests-limit: 10 + labels: + - "dependencies" + commit-message: + prefix: "deps(actions)" + include: "scope" + rebase-strategy: "auto" + groups: + actions-minor-and-patch: + applies-to: "version-updates" + update-types: + - "minor" + - "patch"