From 8f6b35c91c3ff00e66e0d34065e8bbf4a705f00d Mon Sep 17 00:00:00 2001 From: Christopher Horrell Date: Wed, 29 Jul 2026 13:23:12 -0400 Subject: [PATCH] Switch dependabot to monthly updates Also: groupd all updates. See: https://github.blog/security/supply-chain-security/tame-dependabot-group-your-updates-slow-the-cadence-keep-security-fast/ --- .github/dependabot.yml | 23 ++++++++--------------- 1 file changed, 8 insertions(+), 15 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c320aa3..a1b6ed6 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,22 +3,11 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "daily" - time: "09:30" - timezone: "America/Toronto" + interval: "monthly" groups: - github-official: + monthly-batch: patterns: - - "actions/*" - update-types: - - "minor" - - "patch" - docker: - patterns: - - "docker/*" - update-types: - - "minor" - - "patch" + - "*" pull-request-branch-name: separator: "/" commit-message: @@ -30,7 +19,11 @@ updates: - package-ecosystem: "pre-commit" directory: "/" schedule: - interval: "weekly" + interval: "monthly" + groups: + monthly-batch: + patterns: + - "*" pull-request-branch-name: separator: "/" commit-message: