Skip to content

ci: enable Dependabot for uv and GitHub Actions#770

Merged
dbrattli merged 1 commit into
masterfrom
ci/enable-dependabot
Apr 20, 2026
Merged

ci: enable Dependabot for uv and GitHub Actions#770
dbrattli merged 1 commit into
masterfrom
ci/enable-dependabot

Conversation

@dbrattli
Copy link
Copy Markdown
Collaborator

Summary

  • Adds .github/dependabot.yml configuring weekly update checks for:
    • Python dependencies via the uv ecosystem (tracks pyproject.toml / uv.lock)
    • GitHub Actions pins across workflow files
  • Updates are grouped per ecosystem to keep PR noise low (one batched PR per week per ecosystem).

Test plan

  • Merge and confirm Dependabot's initial run appears in the repo's Dependabot tab
  • Verify Dependabot opens grouped PRs (not one PR per dep) on the next scheduled run

🤖 Generated with Claude Code

Adds .github/dependabot.yml with weekly update checks for Python
dependencies (pyproject.toml / uv.lock via the uv ecosystem) and
GitHub Actions workflow pins. Updates are grouped into a single PR
per ecosystem to keep review noise low.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@coveralls
Copy link
Copy Markdown

Coverage Status

coverage: 93.512%. remained the same — ci/enable-dependabot into master

@dbrattli dbrattli merged commit e9c249e into master Apr 20, 2026
50 checks passed
@dbrattli dbrattli deleted the ci/enable-dependabot branch April 20, 2026 21:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants