Skip to content

Add Dependabot config for weekly npm and Actions updates#28

Merged
ejntaylor merged 1 commit into
mainfrom
ejntaylor/dependabot-setup
Apr 23, 2026
Merged

Add Dependabot config for weekly npm and Actions updates#28
ejntaylor merged 1 commit into
mainfrom
ejntaylor/dependabot-setup

Conversation

@ejntaylor
Copy link
Copy Markdown
Contributor

Summary

  • Adds .github/dependabot.yml modeled on the hub repo's setup
  • Weekly npm checks at / and weekly github-actions checks at /
  • Groups minor/patch bumps into a single PR (non-major group); labels dependencies + frontend/ci
  • Ignores routine major version bumps; Dependabot security updates still bypass this rule, so vulnerability-driven majors will come through

Test plan

  • Once merged to main, confirm Dependabot runs on schedule (Insights → Dependency graph → Dependabot)
  • Verify first PR batch is grouped as non-major and labeled correctly
  • Confirm no standalone major-version PRs appear for routine releases

🤖 Generated with Claude Code

Groups minor/patch into a single PR and ignores major version
bumps; security updates still bypass the ignore rule.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@ejntaylor
Copy link
Copy Markdown
Contributor Author

/review

@netlify
Copy link
Copy Markdown

netlify Bot commented Apr 23, 2026

Deploy Preview for deluxe-meerkat-8daf24 ready!

Name Link
🔨 Latest commit 8e99bfd
🔍 Latest deploy log https://app.netlify.com/projects/deluxe-meerkat-8daf24/deploys/69e9fd2d335b350008e23387
😎 Deploy Preview https://deploy-preview-28--deluxe-meerkat-8daf24.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@ejntaylor
Copy link
Copy Markdown
Contributor Author

/review

@coderbuds
Copy link
Copy Markdown

coderbuds Bot commented Apr 23, 2026

Add Dependabot config for weekly npm and GitHub Actions updates.

🎯 Quality: 94% Elite · 📦 Size: Small

📈 This month: Your 92nd PR — above team average · Averaging Excellent

See how your team is trending →

@ejntaylor ejntaylor merged commit cc84235 into main Apr 23, 2026
4 checks passed
@ejntaylor ejntaylor deleted the ejntaylor/dependabot-setup branch April 23, 2026 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants