From 159edec28efa7f6be8cb0a7c72479ca34f38f06a Mon Sep 17 00:00:00 2001 From: Kim Pepper <6132+kimpepper@users.noreply.github.com> Date: Tue, 3 Nov 2026 09:51:21 +1100 Subject: [PATCH 1/2] build: add dependabot config --- .github/dependabot.yml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..642282b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,30 @@ +version: 2 + +updates: + - package-ecosystem: composer + directory: "/" + schedule: + interval: weekly + day: wednesday + time: "07:30" + timezone: "Australia/Sydney" + commit-message: + prefix: "build" + include: "scope" + groups: + composer-deps: + patterns: [ "*" ] + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: weekly + day: wednesday + time: "07:30" + timezone: "Australia/Sydney" + commit-message: + prefix: "build" + include: "scope" + groups: + github-actions-deps: + patterns: [ "*" ] From 482f408cd14eb850bd77c6df96ecb16ff68aafc8 Mon Sep 17 00:00:00 2001 From: Kim Pepper <6132+kimpepper@users.noreply.github.com> Date: Tue, 3 Nov 2026 11:41:12 +1100 Subject: [PATCH 2/2] build: update dependabot config --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 642282b..62b837d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -11,9 +11,14 @@ updates: commit-message: prefix: "build" include: "scope" + cooldown: + default-days: 2 groups: composer-deps: patterns: [ "*" ] + composer-security-deps: + applies-to: security-updates + patterns: [ "*" ] - package-ecosystem: "github-actions" directory: "/" @@ -25,6 +30,11 @@ updates: commit-message: prefix: "build" include: "scope" + cooldown: + default-days: 2 groups: github-actions-deps: patterns: [ "*" ] + github-actions-security-deps: + applies-to: security-updates + patterns: [ "*" ]