chore: add enterprise Dependabot configuration - #96
Conversation
There was a problem hiding this comment.
Pull request overview
Adds a Dependabot configuration to automate GitHub Actions dependency updates with grouping, labeling, commit-message conventions, a weekly schedule, and a cooldown period, aligning dependency update PRs with the repo’s branching/workflow expectations.
Changes:
- Introduces
.github/dependabot.ymlwithgithub-actionsecosystem updates targetingdevelop. - Groups all GitHub Actions updates into a single Dependabot PR group.
- Applies standard labels and a commit message prefix, with a weekly Friday schedule and a 7-day cooldown.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
No workflow file existed on this branch, so pull_request CI never triggered (checks showed as NONE). Copy the workflow already proven on PR Cacti#90 so this branch gets real CI signal. Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
d8e813a to
0585d19
Compare
|
Rebased onto develop (was 2 commits behind) and added |
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
bmfmancini
left a comment
bmfmancini
left a comment
There was a problem hiding this comment.
LGTM — standard grouped/cooled-down Dependabot config. Approving.
Adds grouped, cooled-down Dependabot updates with standard ecosystem labels and commit prefixes.