From 8aba8fa0ff40c1f7ba551ee105b03f2e8629e44c Mon Sep 17 00:00:00 2001
From: Oscar V <oscarvalenzuelab@users.noreply.github.com>
Date: Mon, 7 Sep 2026 09:41:27 -0700
Subject: [PATCH] ci(deps): let Dependabot watch the Python dependencies

Dependabot had no `pip` ecosystem entry, so the Python
dependencies in this repo got no version-update PRs and every
upgrade had to be applied by hand after an alert fired.
---
 .github/dependabot.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1270a25..e29d624 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,5 +1,19 @@
 version: 2
 updates:
+  # Python dependencies (requirements / pyproject)
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "python"
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+
   # Enable version updates for GitHub Actions
   - package-ecosystem: "github-actions"
     directory: "/"