This is an automated email from the ASF dual-hosted git repository. sjanc pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/mynewt-newt.git
commit 76a29c1ba5f6f73ea9ab1b574728c2ddf1add556 Author: Szymon Janc <[email protected]> AuthorDate: Sat Oct 24 17:33:10 2026 +0200 ci: Add Dependabot configuration Let Dependabot check weekly for new versions of the actions used in the workflows, grouped so that it produces at most one pull request. Go modules are only updated for security fixes, enabled in .asf.yaml. The open pull request limit for gomod is set to 0, which disables regular version updates while security updates are still opened. Security updates are grouped so that multiple fixes land in a single pull request. Assisted-by: Claude:claude-opus-5-5 --- .github/dependabot.yml | 42 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..d19df1f9 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,42 @@ +# +# Licensed to the Apache Software Foundation (ASF) under one +# or more contributor license agreements. See the NOTICE file +# distributed with this work for additional information +# regarding copyright ownership. The ASF licenses this file +# to you under the Apache License, Version 2.0 (the +# "License"); you may not use this file except in compliance +# with the License. You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, +# software distributed under the License is distributed on an +# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY +# KIND, either express or implied. See the License for the +# specific language governing permissions and limitations +# under the License. +# + + +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + github-actions: + patterns: + - "*" + # Go modules are only updated for security fixes (enabled in + # .asf.yaml), a limit of 0 disables regular version updates. + - package-ecosystem: "gomod" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 0 + groups: + go-modules: + applies-to: security-updates + patterns: + - "*"
