chore: enable dependabot configuration (AUT-106)#17
Conversation
There was a problem hiding this comment.
Pull request overview
This PR adds a Dependabot configuration to automate dependency update pull requests for the repository’s Python and GitHub Actions dependencies on a weekly schedule.
Changes:
- Added
.github/dependabot.ymlwith weekly schedules for pip and GitHub Actions updates. - Configured PR metadata (labels, reviewers) and commit message prefixes.
- Introduced grouping intent for Python minor/patch updates.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| - package-ecosystem: "pip" | ||
| directory: "/" | ||
| schedule: | ||
| interval: "weekly" | ||
| day: "monday" | ||
| time: "06:00" | ||
| timezone: "UTC" | ||
| open-pull-requests-limit: 3 |
There was a problem hiding this comment.
For the pip ecosystem, directory: "/" likely won’t pick up this repo’s dependency manifests because the pinned requirements files live under requirements/ (e.g., requirements/base.in, requirements/test.in, etc.) and there is no root-level requirements.txt. As a result Dependabot may not propose updates for most Python dependencies. Consider changing the pip entry to directory: "/requirements" (and/or adding a second pip update entry for / if you also want to track packaging metadata in setup.py).
| groups: | ||
| python-minor-and-patch: | ||
| update-types: | ||
| - "minor" | ||
| - "patch" | ||
|
|
There was a problem hiding this comment.
The groups configuration defines python-minor-and-patch with update-types, but it doesn’t specify any patterns (or other matching criteria) to indicate which dependencies should be included in the group. Dependabot group definitions require match rules; without them this section may be ignored or treated as invalid. Add an explicit match rule (e.g., a wildcard pattern or a set of dependency name patterns) so minor/patch updates are actually grouped as intended.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Summary
Enabled Dependabot configuration for automated dependency updates.
Changes
Schedule
Testing
Impact
Jira
AUT-106