Skip to content

chore: add Dependabot config with cooldown - #101

Merged
bh2smith merged 3 commits into
mainfrom
chore/dependabot-cooldown
Jun 19, 2026
Merged

bh2smith merged 3 commits into
mainfrom
chore/dependabot-cooldown

Conversation

@skonefal

Copy link
Copy Markdown
Contributor
  • Adds Dependabot configuration for the repository's package ecosystems.
  • Monthly update schedule with a 7-day cooldown before update PRs are opened.
  • Groups updates into security, minor-and-patch, and major.

@bh2smith bh2smith left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems legit.

@bh2smith bh2smith left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Coolio.

skonefal added 3 commits June 19, 2026 11:04
Drop the open-pull-requests-limit: 10 override so Dependabot reverts to its
default open PR limit of 5.

Towards PLA-2146
@bh2smith
bh2smith force-pushed the chore/dependabot-cooldown branch from d7c2f3d to b6b3bcf Compare June 19, 2026 09:04
@bh2smith
bh2smith marked this pull request as ready for review June 19, 2026 09:15
@cursor

cursor Bot commented Jun 19, 2026 •

Copy link
Copy Markdown

PR Summary

Low Risk
CI-only configuration with no runtime or application code changes.

Overview
Introduces Dependabot via a new .github/dependabot.yml so dependency updates are automated instead of manual.

Both npm (repo root) and github-actions use a monthly schedule, a 7-day cooldown before PRs open, and grouped PRs for security updates and minor/patch bumps (wildcard patterns on each ecosystem).

Reviewed by Cursor Bugbot for commit b6b3bcf. Configure here.

@bh2smith
bh2smith merged commit 1e08953 into main Jun 19, 2026
3 checks passed
@bh2smith
bh2smith deleted the chore/dependabot-cooldown branch June 19, 2026 09:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants