Skip to content

chore: enable Dependabot for npm and GitHub Actions - #153

Merged
jbouder merged 1 commit into
mainfrom
chore/enable-dependabot
Aug 5, 2026
Merged

chore: enable Dependabot for npm and GitHub Actions#153
jbouder merged 1 commit into
mainfrom
chore/enable-dependabot

Conversation

@jbouder

@jbouder jbouder commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds .github/dependabot.yml, modeled on the config in nebari-design.

What's covered

Ecosystem Directory
npm /frontend
npm /docs
github-actions /

The Python backend is intentionally not covered.

Behavior

  • Monthly checks, Mondays at 08:00 US/Eastern.
  • Patch and minor updates are grouped into a single PR per ecosystem; majors are ungrouped so each gets its own PR and can be reviewed on its own.
  • @types/node is held at 24.x to match the Node 24 runtime target.

Test plan

  • dependabot.yml parses as valid YAML.
  • After merge, confirm Dependabot picks up the config under Insights → Dependency graph → Dependabot with no config errors.

🤖 Generated with Claude Code

Add a Dependabot config modeled on nebari-design's: monthly checks on
Monday 08:00 US/Eastern, with patch and minor updates grouped into a
single PR so majors land on their own.

Covers the two npm projects (frontend and docs) plus the GitHub Actions
workflows. The Python backend is intentionally not covered.

@types/node is held at 24.x to match the Node 24 runtime target.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@jbouder
jbouder merged commit d1cc15e into main Aug 5, 2026
8 checks passed
@jbouder
jbouder deleted the chore/enable-dependabot branch August 5, 2026 21:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants