From b2db78de914215efb766efccfc7bb2b0dbc315ee Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Mon, 12 Oct 2026 13:44:21 +0000 Subject: [PATCH] chore: add Dependabot configuration targeting dev Enable weekly cargo, docker, and github-actions updates against the dev branch (repo default is master). Group minor/patch version bumps and security updates; apply a 7-day cooldown. --- .github/dependabot.yml | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..cd75c99 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,38 @@ +version: 2 +updates: + - package-ecosystem: "cargo" + directory: "/" + target-branch: "dev" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + groups: + security-updates: + applies-to: security-updates + patterns: + - "*" + version-updates: + applies-to: version-updates + update-types: + - "minor" + - "patch" + patterns: + - "*" + cooldown: + default-days: 7 + - package-ecosystem: "docker" + directory: "/" + target-branch: "dev" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + cooldown: + default-days: 7 + - package-ecosystem: "github-actions" + directory: "/" + target-branch: "dev" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + cooldown: + default-days: 7