chore: add dependabot.yml with uv, docker, and github-actions coverage (#1192)

Adds a compliant dependabot configuration covering all detected
ecosystems with monthly schedule and grouped update-type splits.
This commit is contained in:
John Kennedy 2026-04-15 23:35:42 -07:00 • committed by GitHub
parent 32eecbcee2
commit da11bcdf60
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

52
.github/dependabot.yml vendored Normal file
View file

@ -0,0 +1,52 @@
version: 2
updates:
- package-ecosystem: "uv"
directory: "/"
schedule:
interval: "monthly"
groups:
minor-and-patch:
patterns:
- "*"
update-types:
- "minor"
- "patch"
major:
patterns:
- "*"
update-types:
- "major"
- package-ecosystem: "docker"
directory: "/"
schedule:
interval: "monthly"
groups:
minor-and-patch:
patterns:
- "*"
update-types:
- "minor"
- "patch"
major:
patterns:
- "*"
update-types:
- "major"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "monthly"
groups:
minor-and-patch:
patterns:
- "*"
update-types:
- "minor"
- "patch"
major:
patterns:
- "*"
update-types:
- "major"