Skip to content

chore: limit Dependabot to one grouped weekly github-actions PR#10

Merged
achris7 merged 1 commit into
mainfrom
chore/limit-dependabot
Jun 19, 2026
Merged

chore: limit Dependabot to one grouped weekly github-actions PR#10
achris7 merged 1 commit into
mainfrom
chore/limit-dependabot

Conversation

@achris7

@achris7 achris7 commented Jun 19, 2026

Copy link
Copy Markdown
Member

Adds a standardized Dependabot config: a single grouped weekly github-actions PR (Thursday 09:00 UTC, valid version: 2) to keep workflow action versions current with low PR noise.

Summary by CodeRabbit

  • Chores
    • Configured automatic dependency updates to run weekly on Thursdays

@coderabbitai

coderabbitai Bot commented Jun 19, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 0621aca6-25b5-4607-83dd-73e0b2216f17

📥 Commits

Reviewing files that changed from the base of the PR and between 0c86591 and e3f5ef2.

📒 Files selected for processing (1)
  • .github/dependabot.yml

📝 Walkthrough

Walkthrough

A new .github/dependabot.yml file is added with a Dependabot v2 configuration that schedules weekly GitHub Actions dependency updates every Thursday at 09:00 UTC, grouping all matching PRs under the weekly-updates label using a * wildcard pattern.

Changes

Dependabot Configuration

Layer / File(s) Summary
Dependabot weekly GitHub Actions update rule
.github/dependabot.yml
Introduces the full Dependabot v2 config for the github-actions ecosystem: weekly schedule on Thursdays at 09:00 UTC, scoped to the repository root, with all packages grouped under weekly-updates.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐇 Hop, hop, a config appears,
Keeping actions fresh through the years.
Every Thursday, the bunny checks,
For updates hiding in the specs.
No stale workflows shall remain —
The rabbit's on the job again! 🌿

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/limit-dependabot

Comment @coderabbitai help to get the list of available commands and usage tips.

@achris7 achris7 marked this pull request as ready for review June 19, 2026 16:46
Copilot AI review requested due to automatic review settings June 19, 2026 16:46
@achris7 achris7 merged commit 078d601 into main Jun 19, 2026
1 of 2 checks passed

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a Dependabot configuration intended to reduce PR noise by batching GitHub Actions version bumps into a single weekly grouped update PR.

Changes:

  • Introduces .github/dependabot.yml with Dependabot config version 2.
  • Schedules GitHub Actions dependency updates weekly on Thursday at 09:00 UTC.
  • Groups all GitHub Actions updates into a single group (weekly-updates) via patterns: ["*"].

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/dependabot.yml
Comment on lines +11 to +14
groups:
weekly-updates:
patterns:
- "*"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants