Skip to content

chore(security): add Dependabot for dependency updates#27

Merged
KYBvWHxW merged 1 commit into
mainfrom
chore/add-dependabot
May 3, 2026
Merged

chore(security): add Dependabot for dependency updates#27
KYBvWHxW merged 1 commit into
mainfrom
chore/add-dependabot

Conversation

@KYBvWHxW
Copy link
Copy Markdown
Contributor

@KYBvWHxW KYBvWHxW commented May 3, 2026

Related Issue

Closes #26

Summary

  • Add dependabot.yml with pip and GitHub Actions ecosystems
  • Weekly scan on Monday, max 5 open PRs per ecosystem

Test Plan

  • Dependabot starts creating PRs after merge

Closes #26

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings May 3, 2026 04:25
@KYBvWHxW KYBvWHxW self-assigned this May 3, 2026
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds repository-level Dependabot configuration so the project can automatically propose dependency update PRs for both Python packages and GitHub Actions. It fits the codebase by complementing the existing Python pyproject.toml dependency management and the CI workflow under .github/workflows.

Changes:

  • Add a new .github/dependabot.yml configuration file.
  • Configure weekly Monday checks for the pip ecosystem at the repository root.
  • Configure weekly Monday checks for the github-actions ecosystem, each capped at 5 open PRs.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@KYBvWHxW KYBvWHxW merged commit beccf16 into main May 3, 2026
13 checks passed
@KYBvWHxW KYBvWHxW deleted the chore/add-dependabot branch May 3, 2026 04:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore(security): add Dependabot for dependency updates

3 participants