Skip to content

chore: add Dependabot config (replacing Renovate) - #13

Merged
stephenrob merged 2 commits into
mainfrom
chore/dependabot-config
Nov 13, 2026
Merged

stephenrob merged 2 commits into
mainfrom
chore/dependabot-config

Conversation

@stephenrob

Copy link
Copy Markdown
Contributor

Renovate is being retired across the talis org in favour of Dependabot. Dependabot alerts and security updates are already enabled org-wide through the GitHub code security configuration. This PR adds the standard .github/dependabot.yml for version updates.

Ecosystems detected: github-actions

What it does

  • Weekly (Monday 06:00 London) version updates. Minor and patch updates come as one grouped PR per ecosystem, majors as a separate grouped PR.
  • Cooldown: new releases are skipped until they are 7 days old (30 days for majors), so short-lived malicious releases never get pulled in.
  • Security updates for each ecosystem are grouped into one PR.

Please check the detected directories are right for this repo. Merging is up to the team.

🤖 Generated with Claude Code

@stephenrob
stephenrob merged commit a6e7b73 into main Nov 13, 2026
4 checks passed
@stephenrob
stephenrob deleted the chore/dependabot-config branch November 13, 2026 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant