From 754b889a7bb0041a307e9c05b3b5cfb8c1c9f539 Mon Sep 17 00:00:00 2001 From: Krivoblotsky Date: Wed, 29 Apr 2026 17:58:04 +0300 Subject: [PATCH] ci: add Dependabot config for github-actions and swift MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Adds weekly Dependabot updates for both ecosystems used by the repo: GitHub Actions (the main supply-chain surface — workflows currently have unpinned dependencies that should drift forward over time) and SwiftPM (currently just swift-openapi-runtime, but worth tracking). Open PR limit of 5 per ecosystem keeps things manageable, and the commit prefixes (`ci` / `deps`) sort cleanly in changelogs. Co-Authored-By: Claude Opus 4.7 --- .github/dependabot.yml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..34bcfdb3 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,23 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + commit-message: + prefix: "ci" + labels: + - "dependencies" + - "github-actions" + + - package-ecosystem: "swift" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + commit-message: + prefix: "deps" + labels: + - "dependencies" + - "swift"