From ee44edbbee3eff021bb5ebbf2c2f929a5e8ba164 Mon Sep 17 00:00:00 2001 From: Benjamin Demaille Date: Sun, 23 Aug 2026 23:39:34 +0200 Subject: [PATCH] ci: extend Dependabot to cargo, npm and docker Dependabot only tracked GitHub Actions. Version updates for the Rust crate, the Astro docs site and the Dockerfile base image were never opened; the cargo and npm bumps merged so far came from security advisories only. Adds weekly cargo (/), npm (/docs) and docker (/) ecosystems, and groups minor/patch updates (plus all action bumps) into single PRs to keep the review load low. Co-Authored-By: Claude Opus 5 (1M context) --- .github/dependabot.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5ace4600..f55b28c8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,3 +4,34 @@ updates: directory: "/" schedule: interval: "weekly" + groups: + github-actions: + patterns: + - "*" + + - package-ecosystem: "cargo" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + groups: + cargo-minor-patch: + update-types: + - "minor" + - "patch" + + - package-ecosystem: "npm" + directory: "/docs" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + groups: + npm-minor-patch: + update-types: + - "minor" + - "patch" + + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "weekly"