Skip to content

dependabot: once a week, Monday morning - #14

Merged
aledbf merged 1 commit into
mainfrom
ci/dependabot-weekly
Sep 28, 2026
Merged

aledbf merged 1 commit into
mainfrom
ci/dependabot-weekly

Conversation

@aledbf

@aledbf aledbf commented Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Dependabot opened pull requests in spin almost every day although every ecosystem said weekly: a change to dependabot.yml - five in four days, most of them comments - starts every ecosystem at once, and a change to go.mod or package.json on main has Dependabot remake its open pull requests under new names.

  • day: monday, time: "06:00", timezone: America/Argentina/Buenos_Aires: one run a week, at a known time.
  • rebase-strategy: disabled: a pull request is not remade each time main moves. main's ruleset merges a branch only up to date, so "Update branch" or @dependabot rebase brings one up when it is merged.
  • cooldown: 7 days where it was missing.
  • A note at the top: any change to the file, a comment too, starts every ecosystem.

Checked against SchemaStore's dependabot-2.0 schema.

🤖 Generated with Claude Code


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

…ach time main moves

Every ecosystem was weekly and spin still had pull requests almost daily: a change to this file
starts every ecosystem at once, and a change to a manifest on main had Dependabot remake its
open pull requests. A fixed day and time, rebase-strategy disabled - main's ruleset wants the
branch up to date anyway, which "Update branch" does when it is merged - and a week's cooldown
where it was missing. Where there was no file, the actions and the packages nothing moved.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@aledbf
aledbf merged commit 093ef66 into main Sep 28, 2026
2 checks passed
@aledbf
aledbf deleted the ci/dependabot-weekly branch September 28, 2026 22:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant