From 759e0a1c50bf2c9c6f91f5799faf71af8c7d7ab5 Mon Sep 17 00:00:00 2001 From: hudsonaikins-crown Date: Fri, 13 Nov 2026 13:47:33 -0500 Subject: [PATCH] Dependabot: twice-monthly schedule; skip playwright 1.65 and ruff 0.15+ Co-Authored-By: Claude Opus 5.5 --- .github/dependabot.yml | 22 +++++++++++++++++++--- 1 file changed, 19 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d5abd69..88a43ad 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,19 +1,33 @@ +# Dependabot proposes dependency updates as PRs; it never merges. Hudson merges after CI +# (including the `image` check that starts Playwright inside the real container) passes. +# Schedule: twice a month (1st and 15th, 09:00 New York), one grouped PR per ecosystem. version: 2 updates: - package-ecosystem: "uv" directory: "/" schedule: - interval: "weekly" + interval: "cron" + cronjob: "0 9 1,15 * *" + timezone: "America/New_York" groups: uv-minor-and-patch: update-types: - "minor" - "patch" + ignore: + # 1.65.x's driver needs libatomic.so.1, absent from python:3.12-slim (v0.5.0 incident). + - dependency-name: "playwright" + versions: [">=1.65,<1.66"] + # ruff 0.17 adds ~200 lint findings; upgrade it in its own cleanup change. + - dependency-name: "ruff" + versions: [">=0.15"] - package-ecosystem: "npm" directory: "/deploy/cloudflare" schedule: - interval: "weekly" + interval: "cron" + cronjob: "0 9 1,15 * *" + timezone: "America/New_York" groups: npm-minor-and-patch: update-types: @@ -23,7 +37,9 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + interval: "cron" + cronjob: "0 9 1,15 * *" + timezone: "America/New_York" groups: github-actions-minor-and-patch: update-types: