fix: add Dependabot config for Go modules and GitHub Actions (PILOT-355)#6
fix: add Dependabot config for Go modules and GitHub Actions (PILOT-355)#6matthew-pilot wants to merge 1 commit into
Conversation
Enables automated dependency updates for gomod and github-actions ecosystems on a weekly schedule, with a 5-PR limit per ecosystem. Note: notify-canary.yml workflow is in paths_denied (.github/workflows/**) and will require a human to create manually. See ticket for template.
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
🤖 PR ExplainFile: # L1-2: version header
# L3-11: gomod ecosystem — weekly updates, max 5 open PRs, labels: dependencies + go
# L13-19: github-actions ecosystem — weekly updates, max 5 open PRs, labels: dependencies + ciWhat: Adds Dependabot configuration to auto-open PRs for stale Go modules and GitHub Actions. Both ecosystems scan weekly; each capped at 5 concurrent open PRs. Why (PILOT-355): This is the automated part of the repo hygiene ticket. The manually-required piece ( |
🤖 PR Status#6: fix: add Dependabot config for Go modules and GitHub Actions (PILOT-355)
|
🤖 PR Status — updater#6 (PILOT-355)State: OPEN · Mergeable: MERGEABLE · Draft: no Summary: Adds Dependabot config for Go module + GitHub Actions weekly updates. Repo hygiene (PILOT-162 / PILOT-355). The Ready for operator review/merge when convenient. |
1 participant
What
Adds
.github/dependabot.ymlto enable automated dependency updates:Why
Part of repo hygiene task PILOT-162. This is the Dependabot configuration piece of PILOT-355.
Scope
go build ./...passesNote
The notify-canary.yml workflow referenced in PILOT-355 lives under
.github/workflows/which is in the agent's paths_denied. That part requires a human to create manually — template is in the ticket description.