Skip to content

Add Dependabot config for monthly grouped Go modules and GitHub Actions updates - #13

Open
mcpherrinm with Copilot wants to merge 3 commits into
mainfrom
copilot/add-dependabot-yml
Open

Add Dependabot config for monthly grouped Go modules and GitHub Actions updates#13
mcpherrinm with Copilot wants to merge 3 commits into
mainfrom
copilot/add-dependabot-yml

Conversation

Copilot AI commented May 21, 2026

Copy link
Copy Markdown

Adds repository-level Dependabot automation to keep dependencies current with low PR noise. Go module updates are grouped into one monthly PR, while GitHub Actions updates are grouped into a separate monthly PR.

  • What changed

    • Added .github/dependabot.yml with two update ecosystems:
      • gomod at repository root (/)
      • github-actions at repository root (/)
    • Configured both to run on a monthly schedule.
    • Grouped each ecosystem into a single PR stream to avoid fragmented update PRs.
  • Dependabot configuration

    version: 2
    updates:
      - package-ecosystem: gomod
        directory: "/"
        schedule:
          interval: monthly
        groups:
          go-dependencies:
            patterns:
              - "*"
    
      - package-ecosystem: github-actions
        directory: "/"
        schedule:
          interval: monthly
        groups:
          github-actions-dependencies:
            patterns:
              - "*"

@mcpherrinm
mcpherrinm marked this pull request as ready for review July 30, 2026 19:52
@mcpherrinm
mcpherrinm requested a review from a team as a code owner July 30, 2026 19:52
@mcpherrinm
mcpherrinm requested a review from Copilot July 30, 2026 19:52

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a repository-level Dependabot configuration to automate dependency updates with reduced PR noise by grouping updates and running them monthly.

Changes:

  • Added .github/dependabot.yml with monthly grouped updates for gomod dependencies at / (matches existing go.mod at repo root).
  • Added monthly grouped updates for github-actions (matches existing workflows under .github/workflows/).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@mcpherrinm
mcpherrinm requested a review from Preston12321 July 30, 2026 20:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants