From 1927b0c6a4ab0d281bd65e4df915d08d6b6d05df Mon Sep 17 00:00:00 2001 From: naiba Date: Thu, 4 Jun 2026 16:19:25 +0000 Subject: [PATCH] chore(ci): add dependabot version updates for gomod and actions Repo only had Dependabot security updates (reactive). Add weekly grouped version updates for Go modules and GitHub Actions to keep dependencies current and reduce CVE accumulation. --- .github/dependabot.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..ec9a7293 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,21 @@ +version: 2 +updates: + - package-ecosystem: "gomod" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + groups: + go-dependencies: + patterns: + - "*" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 5 + groups: + github-actions: + patterns: + - "*"