-
Notifications
You must be signed in to change notification settings - Fork 15
Introduce dependabot #134
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Introduce dependabot #134
Conversation
I will enable Please see the example PRs that are created by Dependabot. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR enables Dependabot for automated dependency updates in the project. The changes configure Dependabot to monitor Python dependencies using the uv package manager and adjust the project configuration to accommodate Dependabot's build environment constraints.
- Adds Dependabot configuration file with daily dependency update checks
- Modifies
pyproject.toml
to work with Dependabot's minimal checkout environment
Reviewed Changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.
File | Description |
---|---|
.github/dependabot.yml |
Configures Dependabot with uv ecosystem support, daily update schedule, and commit message prefix |
pyproject.toml |
Adds fallback version for VCS-less builds and inline README text to support Dependabot's minimal environment |
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice looks good! 🚀 2 small comments
- package-ecosystem: "uv" | ||
directory: "/" | ||
schedule: | ||
interval: "daily" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Daily is a little bit much imo! i'd rather have it every 2 weeks or even monthly?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe we can use https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#versioning-strategy-- to improve the example pull requests
This PR enables
Dependabot
.