|
1 | | -# Dependabot configuration for automated dependency updates |
| 1 | +# Dependabot configuration |
2 | 2 | # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates |
| 3 | +# |
| 4 | +# SECURITY UPDATES ONLY |
| 5 | +# ===================== |
| 6 | +# Scheduled version updates are disabled to reduce PR noise. |
| 7 | +# Dependabot will still create PRs for security vulnerabilities (CVEs) |
| 8 | +# detected by GitHub's security advisory database. |
| 9 | +# |
| 10 | +# To manually update dependencies: |
| 11 | +# pip install --upgrade <package> |
| 12 | +# pip freeze > requirements.txt |
| 13 | +# |
| 14 | +# To check for outdated packages: |
| 15 | +# pip list --outdated |
3 | 16 |
|
4 | 17 | version: 2 |
5 | | -updates: |
6 | | - # Python dependencies |
7 | | - - package-ecosystem: "pip" |
8 | | - directory: "/" |
9 | | - schedule: |
10 | | - interval: "weekly" |
11 | | - day: "monday" |
12 | | - time: "09:00" |
13 | | - timezone: "America/New_York" |
14 | | - open-pull-requests-limit: 5 |
15 | | - commit-message: |
16 | | - prefix: "deps" |
17 | | - include: "scope" |
18 | | - labels: |
19 | | - - "dependencies" |
20 | | - - "python" |
21 | | - reviewers: |
22 | | - - "Sakeeb91" |
23 | | - groups: |
24 | | - # Group minor/patch updates together |
25 | | - python-minor: |
26 | | - patterns: |
27 | | - - "*" |
28 | | - update-types: |
29 | | - - "minor" |
30 | | - - "patch" |
31 | | - # Security updates always separate |
32 | | - ignore: |
33 | | - # Ignore major version updates for ML libraries (require manual testing) |
34 | | - - dependency-name: "torch" |
35 | | - update-types: ["version-update:semver-major"] |
36 | | - - dependency-name: "transformers" |
37 | | - update-types: ["version-update:semver-major"] |
38 | | - |
39 | | - # GitHub Actions |
40 | | - - package-ecosystem: "github-actions" |
41 | | - directory: "/" |
42 | | - schedule: |
43 | | - interval: "weekly" |
44 | | - day: "monday" |
45 | | - time: "09:00" |
46 | | - timezone: "America/New_York" |
47 | | - open-pull-requests-limit: 3 |
48 | | - commit-message: |
49 | | - prefix: "ci" |
50 | | - include: "scope" |
51 | | - labels: |
52 | | - - "dependencies" |
53 | | - - "github-actions" |
54 | | - reviewers: |
55 | | - - "Sakeeb91" |
56 | | - |
57 | | - # Docker dependencies |
58 | | - - package-ecosystem: "docker" |
59 | | - directory: "/" |
60 | | - schedule: |
61 | | - interval: "weekly" |
62 | | - day: "monday" |
63 | | - time: "09:00" |
64 | | - timezone: "America/New_York" |
65 | | - open-pull-requests-limit: 2 |
66 | | - commit-message: |
67 | | - prefix: "docker" |
68 | | - include: "scope" |
69 | | - labels: |
70 | | - - "dependencies" |
71 | | - - "docker" |
72 | | - reviewers: |
73 | | - - "Sakeeb91" |
| 18 | +updates: [] |
0 commit comments