Repository navigation
feat: add Dependabot configuration for GitHub Actions updates - #1552
Conversation
There was a problem hiding this comment.
Pull request overview
Adds a Dependabot configuration to automatically keep GitHub Actions dependencies up to date.
Changes:
- Introduces
.github/dependabot.ymlfor scheduled GitHub Actions update PRs - Configures a weekly run on Fridays
- Customizes Dependabot commit message prefix
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| directory: "/" | ||
| schedule: | ||
| interval: "weekly" | ||
| day: "friday" |
There was a problem hiding this comment.
Consider specifying schedule.time and schedule.timezone. Without these, Dependabot uses a default time (UTC), which can lead to PRs opening at unexpected hours for the team and inconsistent operational load.
| day: "friday" | |
| day: "friday" | |
| time: "04:00" | |
| timezone: "Etc/UTC" |
| updates: | ||
| - package-ecosystem: "github-actions" | ||
| directory: "/" |
There was a problem hiding this comment.
Consider adding open-pull-requests-limit for this update entry to avoid PR bursts (e.g., after periods of inactivity or multiple upstream releases). This helps keep review load and CI usage under control.
| interval: "weekly" | ||
| day: "friday" | ||
| commit-message: | ||
| prefix: "build" |
There was a problem hiding this comment.
If the repo follows Conventional Commits, build is typically used for build system changes; for GitHub Actions/workflow updates a prefix like ci (or chore if you treat these as dependency maintenance) is usually a better semantic fit and can help downstream tooling categorize changes correctly.
| prefix: "build" | |
| prefix: "ci" |
No description provided.