From ca4b8f7c87d8e417d92a8035cb972336beb67a47 Mon Sep 17 00:00:00 2001 From: Benjamin Gilbert Date: Thu, 12 Mar 2026 19:25:31 -0600 Subject: [PATCH] Enable Dependabot for GitHub Actions and pre-commit hooks Group Maven updates into a single PR, matching the other ecosystems. Conform the Maven commit message title to the others and drop the `java` label for PRs. Signed-off-by: Benjamin Gilbert --- .github/dependabot.yml | 25 ++++++++++++++++++++++--- 1 file changed, 22 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index be9e20a..692cecb 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,9 +1,28 @@ version: 2 updates: - # Periodically check for Maven plugin updates + - package-ecosystem: github-actions + directory: / + groups: + github-actions: + patterns: ["*"] + labels: ["dependencies"] + schedule: + interval: monthly + - package-ecosystem: maven directory: / + groups: + maven: + patterns: ["*"] + labels: ["dependencies"] + schedule: + interval: monthly + + - package-ecosystem: pre-commit + directory: / + groups: + pre-commit: + patterns: ["*"] + labels: ["dependencies"] schedule: interval: monthly - commit-message: - prefix: maven