From 752a8fc02c24e1f5524a6d157373771bf9911282 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 5 Oct 2026 01:56:39 +0000 Subject: [PATCH] Point Dependabot version updates at dev Dependabot opened its bumps against master, which only gets releases, so they targeted the old webpack/Babel tree that dev has since replaced. Run weekly npm and monthly Actions updates against dev instead, grouping minor and patch bumps into one PR. Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_01WQrSpfRkgMQd4uPabttGbR --- .github/dependabot.yml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..168fbadd --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,20 @@ +version: 2 +updates: + - package-ecosystem: npm + directory: / + # active development happens on dev; master only gets release merges + target-branch: dev + schedule: + interval: weekly + open-pull-requests-limit: 5 + groups: + minor-and-patch: + update-types: + - minor + - patch + + - package-ecosystem: github-actions + directory: / + target-branch: dev + schedule: + interval: monthly