From dc16cc811fdbaf2333293d858ddf1ee44533fb28 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 17 Dec 2025 23:44:36 +0000 Subject: [PATCH] Add dependabot configuration for npm, pip, and github-actions Configure monthly dependency updates with a 7-day cooldown period to avoid upgrading to newly released versions too quickly. Group GitHub Actions updates together. --- dependabot.yml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 dependabot.yml diff --git a/dependabot.yml b/dependabot.yml new file mode 100644 index 0000000..b308082 --- /dev/null +++ b/dependabot.yml @@ -0,0 +1,26 @@ +version: 2 +updates: + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "monthly" + cooldown: + default-days: 7 + + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "monthly" + cooldown: + default-days: 7 + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + cooldown: + default-days: 7 + groups: + github: + patterns: + - "actions/*"