From bbe7a4c217521af2f4b634af579386435ae55c0a Mon Sep 17 00:00:00 2001 From: Vito Date: Sat, 7 Feb 2026 12:27:32 -0800 Subject: [PATCH] Update dependabot.yml updating dependabot. --- .github/dependabot.yml | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 645c171..ba88677 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,10 +1,48 @@ version: 2 + updates: + # Python dependencies (requirements.txt / setup.cfg / pyproject.toml) - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" + day: "sunday" + time: "06:00" + timezone: "America/Los_Angeles" + open-pull-requests-limit: 10 + labels: + - "dependencies" + - "security" + commit-message: + prefix: "deps(pip)" + include: "scope" + rebase-strategy: "auto" + # Optional: group non-breaking updates to reduce PR noise + groups: + python-minor-and-patch: + applies-to: "version-updates" + update-types: + - "minor" + - "patch" + + # GitHub Actions workflow dependencies - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" + day: "sunday" + time: "06:15" + timezone: "America/Los_Angeles" + open-pull-requests-limit: 10 + labels: + - "dependencies" + commit-message: + prefix: "deps(actions)" + include: "scope" + rebase-strategy: "auto" + groups: + actions-minor-and-patch: + applies-to: "version-updates" + update-types: + - "minor" + - "patch"