Files
max-sixty__worktrunk/.github/dependabot.yaml
T
Maximilian Roos 7e43837527 Keep composite action pins current (#4101)
Dependabot only scanned workflow action references, so setup-uv in the
Tend composite setup action lagged behind. This aligns setup-uv at
v10.1.0 and extends the existing daily GitHub Actions update to every
composite action directory.

> _This was written by Codex on behalf of @max-sixty_
2026-09-13 23:28:35 -07:00

48 lines
1.3 KiB
YAML

version: 2
updates:
- package-ecosystem: cargo
directory: "/"
schedule:
interval: weekly
commit-message:
prefix: "chore: "
# Bump all patch versions of rust dependencies as a single PR
groups:
patch:
update-types:
- patch
# Exclude labels due to https://github.com/dependabot/dependabot-core/issues/7645#issuecomment-1986212847
labels: []
- package-ecosystem: "github-actions"
directories:
- "/"
- "/.github/actions/*"
commit-message:
prefix: "chore: "
schedule:
interval: daily
labels: []
- package-ecosystem: npm
directory: "/docs"
schedule:
interval: weekly
commit-message:
prefix: "chore: "
groups:
docs-site:
patterns:
- "*"
ignore:
# `@astrojs/check` declares `peer typescript@"^5.0.0 || ^6.0.0"`, so a
# TypeScript 7 lockfile makes `npm ci` fail ERESOLVE and takes the docs
# build down. This blocks every future major, not just 7 — drop it once
# `@astrojs/check`'s peer range covers the current `typescript` major.
# The weekly pin-bump pass owns that check; see
# `.claude/skills/running-tend/SKILL.md`.
- dependency-name: "typescript"
update-types:
- version-update:semver-major
labels: []