From 5a81d2cd2760b582093a9dd21635f466f2aed2bd Mon Sep 17 00:00:00 2001
From: Oscar V <oscarvalenzuelab@users.noreply.github.com>
Date: Mon, 7 Sep 2026 09:41:10 -0700
Subject: [PATCH] ci(deps): let Dependabot watch the Python dependencies

Dependabot had no `uv` ecosystem entry, so the Python
dependencies in this repo got no version-update PRs and every
upgrade had to be applied by hand after an alert fired.
---
 .github/dependabot.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1270a25..c9a7d25 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,5 +1,19 @@
 version: 2
 updates:
+  # Python dependencies (pyproject.toml + uv.lock)
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "python"
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+
   # Enable version updates for GitHub Actions
   - package-ecosystem: "github-actions"
     directory: "/"