From 5e45951f3961f1136bda4d9f2bea9989616eb78e Mon Sep 17 00:00:00 2001 From: Stephen Robinson Date: Tue, 10 Nov 2026 11:11:36 +0000 Subject: [PATCH 1/2] chore: add Dependabot config, replacing Renovate Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..c837140 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,27 @@ +# Managed centrally: replaces Renovate. Security updates are enabled org-wide via GitHub code security configuration. +version: 2 +updates: + - package-ecosystem: "github-actions" + directories: + - "/" + schedule: + interval: "weekly" + day: "monday" + time: "06:00" + timezone: "Europe/London" + cooldown: + default-days: 7 + semver-major-days: 30 + open-pull-requests-limit: 5 + groups: + github_actions-minor-patch: + applies-to: version-updates + patterns: ["*"] + update-types: ["minor", "patch"] + github_actions-major: + applies-to: version-updates + patterns: ["*"] + update-types: ["major"] + github_actions-security: + applies-to: security-updates + patterns: ["*"] From 04cddc8a0af23f9870768c1674bee145341e6952 Mon Sep 17 00:00:00 2001 From: Stephen Robinson Date: Tue, 10 Nov 2026 11:29:32 +0000 Subject: [PATCH 2/2] fix: only use semver cooldown for ecosystems that support it Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c837140..1db05e8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -11,7 +11,6 @@ updates: timezone: "Europe/London" cooldown: default-days: 7 - semver-major-days: 30 open-pull-requests-limit: 5 groups: github_actions-minor-patch: