Skip to content

build: use Dependabot for dependency updates - #163

Merged
jpvanhal merged 1 commit into
masterfrom
tvuotila/dependabot-updates
Sep 22, 2025
Merged

jpvanhal merged 1 commit into
masterfrom
tvuotila/dependabot-updates

Conversation

@tvuotila

Copy link
Copy Markdown
Collaborator

No description provided.

@tvuotila
tvuotila force-pushed the tvuotila/dependabot-updates branch from 4e4f89c to 44d64cf Compare July 17, 2025 13:08
@jpvanhal
jpvanhal requested review from Copilot and removed request for Copilot July 28, 2025 07:49

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR introduces Dependabot configuration to automate dependency updates for the project. It sets up monitoring for Python packages in the /docs directory to keep dependencies current and secure.

  • Adds Dependabot configuration file for automated dependency management
  • Configures monitoring for pip packages in the docs directory

Comment thread .github/dependabot.yml
version: 2
updates:
- package-ecosystem: pip
directory: '/docs'

Copilot AI Jul 28, 2025

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Dependabot configuration is missing required fields. You need to add a 'schedule' field to specify when dependency updates should be checked (e.g., daily, weekly, monthly). This is a required field in Dependabot v2 configuration.

Suggested change
directory: '/docs'
directory: '/docs'
schedule:
interval: weekly

Copilot uses AI. Check for mistakes.

@jpvanhal jpvanhal left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good stuff! It looks like the .github/dependabot.yml check is failing, though.

@tvuotila
tvuotila force-pushed the tvuotila/dependabot-updates branch from 44d64cf to 6443dbd Compare September 22, 2025 06:33
@tvuotila
tvuotila requested a review from jpvanhal September 22, 2025 06:33
@jpvanhal
jpvanhal merged commit 9c65898 into master Sep 22, 2025
18 checks passed
@jpvanhal
jpvanhal deleted the tvuotila/dependabot-updates branch September 22, 2025 07:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants