From 994bed6a742f478a780cbf4f51b587bee680db41 Mon Sep 17 00:00:00 2001 From: Joris Wouter Jonkers Date: Fri, 21 Aug 2026 14:01:47 +0200 Subject: [PATCH 1/2] chore(deps): drop the Dependabot actions fallback now Renovate runs .github/dependabot.yml covered only the github-actions ecosystem and documented its own exit condition: "disable this file if Renovate covers actions in a given repo". The Renovate app is now installed and enabled on the organization, and the shared preset both groups `matchManagers: ["github-actions"]` and pins their digests, so keeping the fallback means a second PR for every actions bump. --- .github/dependabot.yml | 11 ----------- 1 file changed, 11 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 8426e88..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,11 +0,0 @@ -# Renovate (renovate.json) is the primary dependency manager for JorisJonkers-dev -# repos. Dependabot is enabled only for GitHub Actions security updates as a -# belt-and-braces fallback; disable this file if Renovate covers actions in a -# given repo. -version: 2 -updates: - - package-ecosystem: github-actions - directory: "/" - schedule: - interval: weekly - labels: ["dependencies", "github_actions"] From fe069594b3153e3bad7135c3596b061ea6c21d40 Mon Sep 17 00:00:00 2001 From: Joris Wouter Jonkers Date: Fri, 21 Aug 2026 14:02:09 +0200 Subject: [PATCH 2/2] docs: stop listing dependabot.yml in the repo layout table The file is removed in this branch, so the setup table would point at something that no longer exists. --- docs/REPO_SETUP.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/REPO_SETUP.md b/docs/REPO_SETUP.md index 4b70354..bc6a1c7 100644 --- a/docs/REPO_SETUP.md +++ b/docs/REPO_SETUP.md @@ -29,7 +29,7 @@ | `.github/rulesets/main.json` + `scripts/apply-ruleset.sh` | Org ruleset as code (requires `Pipeline Complete`) | | `.github/PULL_REQUEST_TEMPLATE.md` | PR template (tracking + verification + versioning) | | `.github/ISSUE_TEMPLATE/*` | Bug / feature / task forms | -| `.github/CODEOWNERS`, `dependabot.yml`, `renovate.json` | Ownership + dependency automation | +| `.github/CODEOWNERS`, `renovate.json` | Ownership + dependency automation | | `release-please-config.json`, `.release-please-manifest.json` | Versioning state | | `CONTRIBUTING.md`, `VERSIONING.md`, `SECURITY.md` | Conventions | | `.editorconfig`, `.gitignore`, `.gitleaks.toml`, `LICENSE` | Baseline hygiene |