From b587cdc948f87f05be0afd4198777b3bd1e9c51c Mon Sep 17 00:00:00 2001
From: zeevdr <zeevdr@users.noreply.github.com>
Date: Sun, 26 Apr 2026 14:53:19 +0300
Subject: [PATCH] chore: add dependabot.yml

Enables weekly version bump PRs (minor + patch grouped, majors separate)
across all ecosystems present in the repo. Limit 5 open PRs per ecosystem.

Closes opendecree/decree#148

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .github/dependabot.yml | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..790d3e0
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,31 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directories:
+      - /sdk
+      - /examples
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - ci
+    groups:
+      minor-and-patch:
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - ci
+    groups:
+      minor-and-patch:
+        update-types:
+          - minor
+          - patch