Skip to content

Ci/dependabot config - #542

Open
hashhhh-16 wants to merge 4 commits into
niharika-mente:mainfrom
hashhhh-16:ci/dependabot-config
Open

Ci/dependabot config#542
hashhhh-16 wants to merge 4 commits into
niharika-mente:mainfrom
hashhhh-16:ci/dependabot-config

Conversation

@hashhhh-16

Copy link
Copy Markdown
Contributor

Summary

Adds Dependabot configuration to automate dependency maintenance.

Changes Made

  • Added .github/dependabot.yml
  • Configured weekly npm dependency checks
  • Configured weekly GitHub Actions dependency checks
  • Added dependency labels to generated PRs
  • Limited concurrent dependency PRs to reduce noise

Benefits

  • Keeps dependencies up to date automatically
  • Improves security by surfacing vulnerable packages quickly
  • Reduces maintenance overhead
  • Ensures GitHub Actions receive updates as well

Testing

  • Validated Dependabot configuration syntax
  • Verified update schedules and package ecosystem settings

Checklist

  • Dependabot configuration added
  • GitHub Actions updates enabled
  • Labels configured
  • Weekly schedule configured

closes #468

@vercel

vercel Bot commented Jun 28, 2026

Copy link
Copy Markdown

Someone is attempting to deploy a commit to the niharika-mente's projects Team on Vercel.

A member of the Team first needs to authorize it.

Aamod007
Aamod007 previously approved these changes Jul 2, 2026

@Aamod007 Aamod007 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Aamod007
Aamod007 self-requested a review July 2, 2026 17:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: add automated dependency updates via Dependabot or Renovate

2 participants