From 44f93fafe7479695a416d872313d1f6315b1cf0b Mon Sep 17 00:00:00 2001 From: Max Ammann Date: Thu, 27 Nov 2025 16:02:10 +0100 Subject: [PATCH 1/2] Update dependabot config from KittyCAD/ciso --- .github/dependabot.yml | 40 ++++++++++++++++++++++++++++++++-------- 1 file changed, 32 insertions(+), 8 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d2e3fe8..668f564 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,27 +8,40 @@ updates: directory: / schedule: interval: weekly - day: monday + day: saturday time: '03:00' timezone: America/Los_Angeles open-pull-requests-limit: 5 groups: security: applies-to: security-updates + exclude-patterns: + - kittycad* update-types: - - major - minor - patch + security-major: + applies-to: security-updates + exclude-patterns: + - kittycad* + update-types: + - major patch: applies-to: version-updates + exclude-patterns: + - kittycad* update-types: - patch major: applies-to: version-updates + exclude-patterns: + - kittycad* update-types: - major minor: applies-to: version-updates + exclude-patterns: + - kittycad* update-types: - minor - patch @@ -36,31 +49,42 @@ updates: directory: / schedule: interval: weekly - day: monday + day: saturday time: '03:00' timezone: America/Los_Angeles open-pull-requests-limit: 5 - reviewers: - - iterion - - jessfraz - - paultag groups: security: applies-to: security-updates + exclude-patterns: + - kittycad* update-types: - - major - minor - patch + security-major: + applies-to: security-updates + exclude-patterns: + - kittycad* + update-types: + - major patch: applies-to: version-updates + exclude-patterns: + - kittycad* update-types: - patch major: applies-to: version-updates + exclude-patterns: + - kittycad* update-types: - major minor: applies-to: version-updates + exclude-patterns: + - kittycad* update-types: - minor - patch + cooldown: + default-days: 7 From 7536ee45864a5f5f7e8f35e55616816172b1be0b Mon Sep 17 00:00:00 2001 From: Max Ammann Date: Mon, 8 Dec 2025 15:52:33 +0100 Subject: [PATCH 2/2] Update dependabot config from KittyCAD/ciso --- .github/dependabot.yml | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 668f564..7032c77 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,7 +9,6 @@ updates: schedule: interval: weekly day: saturday - time: '03:00' timezone: America/Los_Angeles open-pull-requests-limit: 5 groups: @@ -45,12 +44,17 @@ updates: update-types: - minor - patch + cooldown: + default-days: 7 + exclude: + - '*kcl*' + - '*zoo*' + - '*kittycad*' - package-ecosystem: cargo directory: / schedule: interval: weekly day: saturday - time: '03:00' timezone: America/Los_Angeles open-pull-requests-limit: 5 groups: @@ -88,3 +92,7 @@ updates: - patch cooldown: default-days: 7 + exclude: + - '*kcl*' + - '*zoo*' + - '*kittycad*'