From 05898ce0fc08616a60976491094b66f03689948e Mon Sep 17 00:00:00 2001 From: Joris Wouter Jonkers Date: Wed, 16 Sep 2026 20:20:14 +0200 Subject: [PATCH] chore(deps): one bot proposes the action updates renovate.json extends the organisation preset, which reads GitHub Actions and pins them by digest. dependabot.yml asked Dependabot for the same ecosystem at the same path, so both bots were editing the same workflow lines. The Dependabot file goes. Alerts are untouched: this file governs update pull requests only. --- .github/dependabot.yml | 29 ----------------------------- 1 file changed, 29 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 235ba55..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,29 +0,0 @@ -# Renovate (renovate.json) is the primary dependency manager for JorisJonkers-dev -# repos. Dependabot is enabled only for GitHub Actions as a belt-and-braces -# fallback; disable this file if Renovate covers actions in a given repo. -# -# Keep the same dependency policy shape as the richer templates under -# templates/dependency-policy/: 7-day cooldown, grouped minor/patch updates, -# separate security grouping, and isolated majors. -version: 2 -updates: - - package-ecosystem: github-actions - directory: "/" - schedule: - interval: weekly - cooldown: - default-days: 7 - open-pull-requests-limit: 5 - groups: - actions: - applies-to: version-updates - update-types: - - minor - - patch - patterns: - - "*" - actions-security: - applies-to: security-updates - patterns: - - "*" - labels: ["dependencies", "github_actions"]