Skip to content

Run Dependabot updates weekly#322

Merged
oschwald merged 1 commit into
mainfrom
wstorey/stf-983-run-github-actions-dependabot-updates-weekly-and-group
Jul 21, 2026
Merged

Run Dependabot updates weekly#322
oschwald merged 1 commit into
mainfrom
wstorey/stf-983-run-github-actions-dependabot-updates-weekly-and-group

Conversation

@horgh

@horgh horgh commented Jul 21, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

We now review dependency updates weekly rather than daily, so switch every Dependabot update schedule to weekly on Monday mornings.

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Dependency and automation update checks will now run weekly on Mondays instead of daily.

@horgh @claude
Run Dependabot updates weekly
6a34e22 
We now review dependency updates weekly rather than daily, so daily
update runs only generate churn. Check for updates once a week on
Monday morning instead.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings July 21, 2026 18:51
Copilot AI reviewed Jul 21, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request updates the repository’s Dependabot configuration to align dependency update cadence with the team’s new weekly review process, reducing update noise while keeping dependencies regularly maintained.

Changes:

  • Switched the Composer Dependabot update schedule from daily to weekly on Mondays.
  • Switched the GitHub Actions Dependabot update schedule from daily to weekly on Mondays.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@coderabbitai

coderabbitai Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 6c14bd4e-6718-46b6-b284-3a5ab236fd3f

📥 Commits

Reviewing files that changed from the base of the PR and between 0d5ec79 and 6a34e22.

📒 Files selected for processing (1)
  • .github/dependabot.yml
📝 Walkthrough

Walkthrough

Dependabot schedules for Composer and GitHub Actions were changed from daily to weekly, both running on Monday. Existing Composer timing, pull request limits, and cooldown settings remain unchanged.

Changes

Dependabot scheduling

Layer / File(s) Summary
Weekly Monday schedules
.github/dependabot.yml		 Composer and GitHub Actions updates now run weekly on Monday while preserving existing configuration settings.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: copilot

Poem

A rabbit checks the Monday tune,
While updates hop beneath the moon.
Composer waits, Actions too,
Weekly hops are fresh and new.
No daily dash—just carrots bright!

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly summarizes the main change from daily to weekly Dependabot updates.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch wstorey/stf-983-run-github-actions-dependabot-updates-weekly-and-group

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@oschwald
oschwald merged commit a598ecd into main Jul 21, 2026
40 checks passed
@oschwald
oschwald deleted the wstorey/stf-983-run-github-actions-dependabot-updates-weekly-and-group branch July 21, 2026 20:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments
@oschwald oschwald oschwald approved these changes

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@horgh @oschwald