From 2d9d05e238ac2a6812a680feca8ad153c36a6cb3 Mon Sep 17 00:00:00 2001
From: Michael Weiss <code@mweiss.ch>
Date: Thu, 10 Sep 2026 22:23:44 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7=20Add=20Dependabot=20config=20for?=
 =?UTF-8?q?=20GitHub=20Actions=20and=20pip?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/dependabot.yml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..42c7938
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,30 @@
+# Dependabot configuration
+# See https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+version: 2
+updates:
+
+  # GitHub Actions used in .github/workflows/*.yml.
+  # Actions pinned to a branch (e.g. `@main`) are not tracked by Dependabot.
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: weekly
+    day: monday
+  # One PR per week for all action bumps instead of one PR per action.
+  groups:
+    github-actions:
+      patterns: ['*']
+  commit-message:
+    prefix: "⬆️"
+
+  # Python dependencies declared in pyproject.toml (runtime + optional extras).
+- package-ecosystem: pip
+  directory: /
+  schedule:
+    interval: weekly
+    day: monday
+  groups:
+    python-dependencies:
+      patterns: ['*']
+  commit-message:
+    prefix: "⬆️"