From 5a827508f4c4bca48bbc22d032f09c2f83ffc4a1 Mon Sep 17 00:00:00 2001 From: Cristian Magherusan-Stanciu Date: Tue, 27 Oct 2026 15:40:03 +0100 Subject: [PATCH] ci: add Dependabot for GitHub Actions and Go modules Weekly grouped updates, two open PRs per ecosystem, matching cloud-commitments-go and cloud-commitments-mcp, so the SHA-pinned actions and module versions get maintained. Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..5e738fb59 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,18 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + open-pull-requests-limit: 2 + groups: + github-actions: + patterns: ["*"] + - package-ecosystem: gomod + directory: / + schedule: + interval: weekly + open-pull-requests-limit: 2 + groups: + gomod: + patterns: ["*"]