Skip to content

ci: configure dependabot security updates#384

Merged
a-klos merged 1 commit into
mainfrom
dependabot-security-groups
May 19, 2026
Merged

ci: configure dependabot security updates#384
a-klos merged 1 commit into
mainfrom
dependabot-security-groups

Conversation

@a-klos
Copy link
Copy Markdown
Member

@a-klos a-klos commented May 19, 2026

This pull request updates the .github/dependabot.yml configuration to expand and improve dependency update management for both Python and npm projects. The key changes include supporting multiple directories for dependency updates, introducing security update grouping, and adding npm ecosystem support.

Dependency management improvements:

  • Expanded Python dependency updates to cover multiple directories, including various libs and services subfolders.
  • Added npm ecosystem support, enabling dependency updates for the root project and selected frontend-related directories.

Security and configuration enhancements:

  • Introduced grouping for security updates for both Python and npm dependencies, allowing security-related updates to be managed separately.
  • Set open-pull-requests-limit to 0 for both Python and npm, effectively disabling automatic PR creation for dependency updates unless manually triggered.

@a-klos a-klos requested a review from robodev-r2d2 May 19, 2026 08:33
@a-klos a-klos added this pull request to the merge queue May 19, 2026
Merged via the queue into main with commit fd8c537 May 19, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants