Skip to content

chore: add Dependabot config for npm, cargo, and actions#79

Closed
ubugeeei wants to merge 1 commit into
codex/vue-supportfrom
codex/prod-dependabot
Closed

chore: add Dependabot config for npm, cargo, and actions#79
ubugeeei wants to merge 1 commit into
codex/vue-supportfrom
codex/prod-dependabot

Conversation

@ubugeeei
Copy link
Copy Markdown
Collaborator

Summary

  • Schedule weekly Dependabot updates for the five package ecosystems we actually use: root npm, docs npm, backend cargo, render cargo, and GitHub Actions.
  • Root npm is split into production / development groups so security bumps don't get buried under devDependency churn.
  • Per-ecosystem PR caps keep the inbound volume manageable.

Closes #54.

Test plan

  • YAML syntax check
  • After merge: confirm Dependabot picks up the schedule (visible under Insights → Dependency graph → Dependabot).

🤖 Generated with Claude Code

Closes #54.

Schedules weekly updates for:
- root npm (split into production / development groups)
- docs/ npm (grouped)
- backend/ cargo
- render/ cargo
- github-actions

Caps are set per-ecosystem to keep the inbound PR volume sane.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant