From f6306daec7fd322998c40c339e08f6531a2b7954 Mon Sep 17 00:00:00 2001 From: Nicholas Ludwig Date: Fri, 23 Oct 2026 14:56:47 -0700 Subject: [PATCH] Switch from Dependabot to Renovate for dependency updates Signed-off-by: Nicholas Ludwig --- .github/dependabot.yml | 24 ------------------------ .github/renovate.json | 24 ++++++++++++++++++++++++ 2 files changed, 24 insertions(+), 24 deletions(-) delete mode 100644 .github/dependabot.yml create mode 100644 .github/renovate.json diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 7106a9e..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,24 +0,0 @@ -# Copyright (c) Microsoft Corporation -# SPDX-License-Identifier: MIT -# -# For documentation on the format of this file, see -# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file - -version: 2 -updates: - - - package-ecosystem: "github-actions" - # Workflow files stored in the - # default location of `.github/workflows` - directory: "/" - schedule: - interval: "weekly" - day: "saturday" - cooldown: - default-days: 7 - - - package-ecosystem: "gitsubmodule" - directory: "/" - schedule: - interval: "weekly" - day: "saturday" \ No newline at end of file diff --git a/.github/renovate.json b/.github/renovate.json new file mode 100644 index 0000000..d882027 --- /dev/null +++ b/.github/renovate.json @@ -0,0 +1,24 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "config:recommended", + "helpers:pinGitHubActionDigests" + ], + "enabledManagers": ["github-actions", "git-submodules"], + "schedule": ["* * * * 6"], + "git-submodules": { + "enabled": true + }, + "packageRules": [ + { + "matchManagers": ["github-actions"], + "groupName": "github-actions", + "minimumReleaseAge": "7 days" + }, + { + "matchManagers": ["git-submodules"], + "matchDepNames": ["external/**"], + "groupName": "git-submodules" + } + ] +}