Files
ComfyAssets-ComfyUI_PromptM…/.github/dependabot.yml
T
Vito faac2d6f52 ci(deps): stop Dependabot raising pip version floors (#625) (#626)
A custom node's requirements install into ComfyUI's shared environment,
so raising a floor force-upgrades the package for every other custom
node there. Our >= floors already allow each new release, so leave them
alone and only widen a requirement that excludes it.
2026-11-11 15:12:43 +00:00

70 lines
1.9 KiB
YAML

version: 2
updates:
# Python dependencies (requirements.txt / setup.cfg / pyproject.toml)
- package-ecosystem: "pip"
directory: "/"
# Our requirements are minimum versions that install into ComfyUI's shared
# environment. Leave a floor alone when it already allows the new release;
# raising it would force-upgrade the package for every other custom node.
versioning-strategy: "increase-if-necessary"
schedule:
interval: "weekly"
day: "sunday"
time: "06:00"
timezone: "America/Los_Angeles"
open-pull-requests-limit: 10
labels:
- "dependencies"
- "security"
commit-message:
prefix: "deps(pip)"
include: "scope"
rebase-strategy: "auto"
# These floors follow ComfyUI's requirements.txt, never the newest release.
ignore:
- dependency-name: "Pillow"
- dependency-name: "aiohttp"
- dependency-name: "numpy"
# Optional: group non-breaking updates to reduce PR noise
groups:
python-minor-and-patch:
applies-to: "version-updates"
update-types:
- "minor"
- "patch"
# GitHub Actions workflow dependencies
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "sunday"
time: "06:15"
timezone: "America/Los_Angeles"
open-pull-requests-limit: 10
labels:
- "dependencies"
commit-message:
prefix: "deps(actions)"
include: "scope"
rebase-strategy: "auto"
groups:
actions-minor-and-patch:
applies-to: "version-updates"
update-types:
- "minor"
- "patch"
# Maintainer browser test dependencies; Viewer.js itself has an asset-aware updater.
- package-ecosystem: "npm"
directory: "/tools/vendor"
schedule:
interval: "weekly"
allow:
- dependency-name: "@playwright/test"
labels:
- "dependencies"
commit-message:
prefix: "deps(vendor-tools)"