From 6a0adc4d1350a553aac389ac3a31534b10201142 Mon Sep 17 00:00:00 2001 From: Yorick de Wid Date: Tue, 28 Jul 2026 12:36:56 +0000 Subject: [PATCH] chore: add Dependabot version updates (monthly) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This repo had no `.github/dependabot.yml`. Adds `nuget`, `github-actions` and `docker` ecosystems. **Monthly, not weekly, and deliberately so.** The C# Webservice is EOL end of August 2026, so this is scoped to catch something that genuinely matters before then rather than generate weekly PRs nobody will merge. `open-pull-requests-limit` is 3. Minor/patch grouped; majors ungrouped. If you'd rather this repo just stay quiet until EOL, say the word and I'll drop it — security alerts work without a config file either way, so nothing is lost by not having this. No code change. Co-Authored-By: Claude Opus 5 (1M context) --- .github/dependabot.yml | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..dd30955a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,34 @@ +# Dependabot version updates. +# Security updates are enabled repo-wide and are not controlled by this file. +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file +# +# Monthly, not weekly: the C# stack is on its way out (Webservice EOL end of +# August 2026), so this is here to catch something that actually matters before +# then — not to generate a weekly PR nobody will merge. + +version: 2 +updates: + - package-ecosystem: "nuget" + directory: "/" + schedule: + interval: "monthly" + open-pull-requests-limit: 3 + # Majors stay ungrouped — they get their own PR and a real review. + # (dependency-type grouping is npm-only, so this groups by pattern.) + groups: + minor-and-patch: + patterns: ["*"] + update-types: ["minor", "patch"] + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + groups: + actions: + patterns: ["*"] + + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "monthly"