Skip to content

ci: configure dependabot - #252

Open
rohitkumarnaidu wants to merge 1 commit into
omroy07:mainfrom
rohitkumarnaidu:feat/dependabot
Open

ci: configure dependabot#252
rohitkumarnaidu wants to merge 1 commit into
omroy07:mainfrom
rohitkumarnaidu:feat/dependabot

Conversation

@rohitkumarnaidu

@rohitkumarnaidu rohitkumarnaidu commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

📝 Pull Request Summary

Configures Dependabot to automatically keep LearnSphere's Node.js, Python, and GitHub Actions dependencies up-to-date, improving the long-term security and stability of the platform. 🤖

Note: This PR is proudly submitted as part of the ECSoC / ELUSOC 2026 open-source program. 🚀


🔗 Related Issue

Closes #245


🔄 Type of Change

  • 🐛 Bug fix (non-breaking change that fixes an issue)
  • ✨ New feature (non-breaking change that adds functionality)
  • 💥 Breaking change (fix or feature that would cause existing functionality to change)
  • 📚 Documentation update
  • ♿ Accessibility improvement
  • ⚡ Performance improvement
  • 🔒 Security fix
  • 🔧 CI/Tooling change

📋 Changes Made

  • Created .github/dependabot.yml.
  • Configured weekly updates for pip (backend) and npm (frontend).
  • Configured monthly updates for github-actions.
  • Automatically assigned @omroy07 as both the assignee and reviewer for automated PRs.
  • Automatically tags automated PRs with the dependencies label and specific ecosystem labels (python, javascript, ci).

🧪 Testing

  • Opened the affected pages in a browser — no visual regressions
  • Opened browser DevTools console — no new errors or warnings
  • Tested on mobile viewport (DevTools responsive mode at 375px width)
  • Verified accessibility with keyboard-only navigation
  • Tested on multiple browsers (Chrome, Firefox) if applicable

✅ Contributor Checklist

  • My branch is up-to-date with main
  • I have tested my changes locally
  • My changes do not introduce console errors or warnings
  • I have not included unrelated changes
  • No secrets, API keys, or credentials are committed
  • My commit messages follow the Conventional Commits format

Copilot AI review requested due to automatic review settings August 3, 2026 17:06
@vercel

vercel Bot commented Aug 3, 2026

Copy link
Copy Markdown

@rohitkumarnaidu is attempting to deploy a commit to the Om Roy's projects Team on Vercel.

A member of the Team first needs to authorize it.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Feature]: Add Dependabot configuration for automated dependency updates

2 participants