Skip to content

Commit c528333

Browse files
committed
ci: add dependabot for automated dependency updates
- Configure weekly Python dependency updates - Configure weekly GitHub Actions updates - Configure weekly Docker base image updates - Group minor/patch updates together - Ignore major ML library updates (require manual testing) - Add appropriate labels for PR organization
1 parent 1972dd6 commit c528333

1 file changed

Lines changed: 73 additions & 0 deletions

File tree

.github/dependabot.yml

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
# Dependabot configuration for automated dependency updates
2+
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates
3+
4+
version: 2
5+
updates:
6+
# Python dependencies
7+
- package-ecosystem: "pip"
8+
directory: "/"
9+
schedule:
10+
interval: "weekly"
11+
day: "monday"
12+
time: "09:00"
13+
timezone: "America/New_York"
14+
open-pull-requests-limit: 5
15+
commit-message:
16+
prefix: "deps"
17+
include: "scope"
18+
labels:
19+
- "dependencies"
20+
- "python"
21+
reviewers:
22+
- "Sakeeb91"
23+
groups:
24+
# Group minor/patch updates together
25+
python-minor:
26+
patterns:
27+
- "*"
28+
update-types:
29+
- "minor"
30+
- "patch"
31+
# Security updates always separate
32+
ignore:
33+
# Ignore major version updates for ML libraries (require manual testing)
34+
- dependency-name: "torch"
35+
update-types: ["version-update:semver-major"]
36+
- dependency-name: "transformers"
37+
update-types: ["version-update:semver-major"]
38+
39+
# GitHub Actions
40+
- package-ecosystem: "github-actions"
41+
directory: "/"
42+
schedule:
43+
interval: "weekly"
44+
day: "monday"
45+
time: "09:00"
46+
timezone: "America/New_York"
47+
open-pull-requests-limit: 3
48+
commit-message:
49+
prefix: "ci"
50+
include: "scope"
51+
labels:
52+
- "dependencies"
53+
- "github-actions"
54+
reviewers:
55+
- "Sakeeb91"
56+
57+
# Docker dependencies
58+
- package-ecosystem: "docker"
59+
directory: "/"
60+
schedule:
61+
interval: "weekly"
62+
day: "monday"
63+
time: "09:00"
64+
timezone: "America/New_York"
65+
open-pull-requests-limit: 2
66+
commit-message:
67+
prefix: "docker"
68+
include: "scope"
69+
labels:
70+
- "dependencies"
71+
- "docker"
72+
reviewers:
73+
- "Sakeeb91"

0 commit comments

Comments
 (0)