Skip to content

Add Dependabot configuration - #678

Merged
gewarren merged 3 commits into
mainfrom
add-dependabot-config
Oct 22, 2026
Merged

gewarren merged 3 commits into
mainfrom
add-dependabot-config

Conversation

@gewarren

@gewarren gewarren commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Configure weekly grouped updates for GitHub Actions, NuGet, and npm across the repository.

Validation

  • YAML syntax validated.

gewarren and others added 2 commits October 22, 2026 15:40
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The write-enabled approval and merge workflow needs explicit human review because the stated PR scope excludes it.

2 open issues
What changed in this PR

This PR adds repository-wide dependency update scheduling and a workflow intended to automate handling of Dependabot pull requests.

Changes:

  • Schedules weekly updates for GitHub Actions, NuGet, and npm.
  • Configures wildcard dependency groups for NuGet and npm.
  • Adds automatic approval and squash-merge commands for matching Dependabot PRs targeting main.
File Description
.github/​workflows/​dependabot-approve-merge.yml Adds Dependabot approval and merge automation.
.github/​dependabot.yml Defines weekly update schedules and dependency grouping.

Review effort: Balanced

Comment thread .github/dependabot.yml
Comment thread .github/workflows/dependabot-approve-merge.yml
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@gewarren
gewarren requested a review from guardrex October 22, 2026 16:04
@gewarren
gewarren enabled auto-merge (squash) October 22, 2026 16:04
@gewarren
gewarren merged commit 49f93d7 into main Oct 22, 2026
2 of 3 checks passed
@gewarren
gewarren deleted the add-dependabot-config branch October 22, 2026 16:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants