Skip to content

Commit a2d127b

Browse files
committed
chore: disable scheduled dependabot updates (security only)
1 parent 160f44c commit a2d127b

1 file changed

Lines changed: 15 additions & 70 deletions

File tree

.github/dependabot.yml

Lines changed: 15 additions & 70 deletions
Original file line numberDiff line numberDiff line change
@@ -1,73 +1,18 @@
1-
# Dependabot configuration for automated dependency updates
1+
# Dependabot configuration
22
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates
3+
#
4+
# SECURITY UPDATES ONLY
5+
# =====================
6+
# Scheduled version updates are disabled to reduce PR noise.
7+
# Dependabot will still create PRs for security vulnerabilities (CVEs)
8+
# detected by GitHub's security advisory database.
9+
#
10+
# To manually update dependencies:
11+
# pip install --upgrade <package>
12+
# pip freeze > requirements.txt
13+
#
14+
# To check for outdated packages:
15+
# pip list --outdated
316

417
version: 2
5-
updates:
6-
# Python dependencies
7-
- package-ecosystem: "pip"
8-
directory: "/"
9-
schedule:
10-
interval: "weekly"
11-
day: "monday"
12-
time: "09:00"
13-
timezone: "America/New_York"
14-
open-pull-requests-limit: 5
15-
commit-message:
16-
prefix: "deps"
17-
include: "scope"
18-
labels:
19-
- "dependencies"
20-
- "python"
21-
reviewers:
22-
- "Sakeeb91"
23-
groups:
24-
# Group minor/patch updates together
25-
python-minor:
26-
patterns:
27-
- "*"
28-
update-types:
29-
- "minor"
30-
- "patch"
31-
# Security updates always separate
32-
ignore:
33-
# Ignore major version updates for ML libraries (require manual testing)
34-
- dependency-name: "torch"
35-
update-types: ["version-update:semver-major"]
36-
- dependency-name: "transformers"
37-
update-types: ["version-update:semver-major"]
38-
39-
# GitHub Actions
40-
- package-ecosystem: "github-actions"
41-
directory: "/"
42-
schedule:
43-
interval: "weekly"
44-
day: "monday"
45-
time: "09:00"
46-
timezone: "America/New_York"
47-
open-pull-requests-limit: 3
48-
commit-message:
49-
prefix: "ci"
50-
include: "scope"
51-
labels:
52-
- "dependencies"
53-
- "github-actions"
54-
reviewers:
55-
- "Sakeeb91"
56-
57-
# Docker dependencies
58-
- package-ecosystem: "docker"
59-
directory: "/"
60-
schedule:
61-
interval: "weekly"
62-
day: "monday"
63-
time: "09:00"
64-
timezone: "America/New_York"
65-
open-pull-requests-limit: 2
66-
commit-message:
67-
prefix: "docker"
68-
include: "scope"
69-
labels:
70-
- "dependencies"
71-
- "docker"
72-
reviewers:
73-
- "Sakeeb91"
18+
updates: []

0 commit comments

Comments
 (0)