Skip to content

chore: align Dependabot config with trend-radar pattern#144

Merged
chrisreddington merged 3 commits into
mainfrom
chrisreddington/align-dependabot-config
Apr 24, 2026
Merged

chore: align Dependabot config with trend-radar pattern#144
chrisreddington merged 3 commits into
mainfrom
chrisreddington/align-dependabot-config

Conversation

@chrisreddington
Copy link
Copy Markdown
Owner

Aligns .github/dependabot.yml with the pattern established in chrisreddington/trend-radar (#217).

Changes

  • GitHub Actions group: renamed actions-minoractions-all and added major to update types
  • npm cooldown: replaced single default-days: 7 with semver-specific cooldowns (semver-major-days: 14, semver-minor-days: 3, semver-patch-days: 3)
  • npm-development group: added major updates (was only minor + patch)
  • npm-production group: added minor updates (was only patch)
  • Removed open-pull-requests-limit: 10 — not needed with grouping in place

The automerge workflow already matches trend-radar — no changes needed there.

- Rename actions-minor group to actions-all and include major updates
- Replace npm default-days cooldown with semver-specific days (major: 14, minor: 3, patch: 3)
- Add major updates to npm-development group
- Add minor updates to npm-production group
- Remove open-pull-requests-limit (not needed with grouping)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
chrisreddington and others added 2 commits April 24, 2026 06:06
zizmor requires a default-days fallback when semver-specific cooldown
days are configured. Setting it to 3 to match the minor/patch value.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
zizmor requires default-days >= 7. Semver-specific days still apply
for major (14d), minor (3d), and patch (3d).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@chrisreddington chrisreddington merged commit 603b91c into main Apr 24, 2026
27 checks passed
@chrisreddington chrisreddington deleted the chrisreddington/align-dependabot-config branch April 24, 2026 05:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant