Skip to content

chore: configure Dependabot for pnpm and GitHub Actions - #388

Open
RahilAlam929 wants to merge 1 commit into
OpenElements:mainfrom
RahilAlam929:rahil/issue-383-dependabot
Open

chore: configure Dependabot for pnpm and GitHub Actions#388
RahilAlam929 wants to merge 1 commit into
OpenElements:mainfrom
RahilAlam929:rahil/issue-383-dependabot

Conversation

@RahilAlam929

Copy link
Copy Markdown

Description

Configure Dependabot to keep pnpm dependencies and GitHub Actions dependencies up to date automatically.

Related Issue

Closes #383

Changes

  • Added .github/dependabot.yml
  • Enabled weekly pnpm dependency updates
  • Enabled weekly GitHub Actions updates
  • Limited open Dependabot PRs to 10
  • Added dependencies and configuration labels
  • Grouped pnpm development dependencies

Pre-Submission Checklist

  • My commit messages follow the Conventional Commits format
  • This PR is against the main branch

Type of Change

  • chore: Build, CI/CD, or dependency updates

How Has This Been Tested?

Test Steps:

  1. Reviewed the Dependabot configuration
  2. Ran git diff --check
  3. Verified the configuration is located at .github/dependabot.yml

Screenshots/Videos

Not applicable.

Additional Context

This addresses issue #383 by configuring automated weekly dependency updates for pnpm and GitHub Actions.

@netlify

netlify Bot commented Aug 23, 2026

Copy link
Copy Markdown

Deploy Preview for open-elements ready!

Name Link
🔨 Latest commit 0d307e4
🔍 Latest deploy log https://app.netlify.com/projects/open-elements/deploys/6a8b3f9b82ff9500085c6613
😎 Deploy Preview https://deploy-preview-388--open-elements.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 68
Accessibility: 98
Best Practices: 92
SEO: 100
PWA: 60
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

@RahilAlam929 RahilAlam929 left a comment

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Implemented the Dependabot configuration for issue #383.

  • Added weekly pnpm dependency updates
  • Added weekly GitHub Actions updates
  • Set the open PR limit to 10
  • Added dependencies and configuration labels
  • Grouped pnpm development dependency updates

This addresses the requirements of #383.

Signed-off-by: MD rahil <rahilalam0786s@gmail.com>
@RahilAlam929
RahilAlam929 force-pushed the rahil/issue-383-dependabot branch from 16cd6b0 to 0d307e4 Compare August 23, 2026 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

security: configure Dependabot for pnpm and GitHub Actions

1 participant