Skip to content

ci: add Dependabot config for automated dependency updates - #456

Open
chernojagne wants to merge 2 commits into
fastify:mainfrom
autar-pr:setup-dependabot-3d0c00fd
Open

ci: add Dependabot config for automated dependency updates#456
chernojagne wants to merge 2 commits into
fastify:mainfrom
autar-pr:setup-dependabot-3d0c00fd

Conversation

@chernojagne

Copy link
Copy Markdown

Add .github/dependabot.yml to enable automated weekly dependency updates across all npm package directories and GitHub Actions workflows.

The repo has 31 package.json manifests (packages, starters, e2e fixtures, docs) and GitHub Actions workflows with no existing automation to keep them current. Dependabot will open grouped PRs once a week per ecosystem, reducing manual update toil and keeping transitive dependency security patches flowing.

Configuration choices:

  • Schedule: weekly — good balance between staying current and reducing PR noise
  • Grouped updates: all dependencies per ecosystem batched into a single PR

This change was generated by Autar and reviewed by a human before submission.

@changeset-bot

changeset-bot Bot commented Jul 29, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: e0097b9

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 0 packages

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant