Skip to content

Conversation

sercancicek
Copy link
Contributor

This PR enables Dependabot.

@sercancicek
Copy link
Contributor Author

sercancicek commented Oct 10, 2025

I will enable dependabot from security_analysis once the PR is merged.

Please see the example PRs that are created by Dependabot.

@sercancicek sercancicek marked this pull request as ready for review October 10, 2025 13:03
@sercancicek sercancicek requested a review from Copilot October 10, 2025 13:06
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR enables Dependabot for automated dependency updates in the project. The changes configure Dependabot to monitor Python dependencies using the uv package manager and adjust the project configuration to accommodate Dependabot's build environment constraints.

  • Adds Dependabot configuration file with daily dependency update checks
  • Modifies pyproject.toml to work with Dependabot's minimal checkout environment

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
.github/dependabot.yml Configures Dependabot with uv ecosystem support, daily update schedule, and commit message prefix
pyproject.toml Adds fallback version for VCS-less builds and inline README text to support Dependabot's minimal environment

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Copy link
Contributor

@jochemvandooren jochemvandooren left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice looks good! 🚀 2 small comments

- package-ecosystem: "uv"
directory: "/"
schedule:
interval: "daily"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Daily is a little bit much imo! i'd rather have it every 2 weeks or even monthly?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants