build(deps): add dependabot configuration for automated dependency updates#1354
build(deps): add dependabot configuration for automated dependency updates#1354just1and0 wants to merge 2 commits into
Conversation
Adds dependabot.yml to keep Swift Package Manager dependencies, Ruby bundler gems, and GitHub Actions up to date on a daily schedule with 7-day cooldown. PRs target the dependency-updates branch.
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request introduces a .github/dependabot.yml configuration file to automate dependency updates for Swift, Bundler, and GitHub Actions. The reviewer identified a critical issue where an unsupported cooldown configuration block is used across all defined package ecosystems, which will cause Dependabot parsing to fail. It is recommended to remove these invalid cooldown blocks to ensure the configuration is valid.
mikehardy
changed the title
|
one issue for github actions: The property '#/updates/2/cooldown/semver-major-days' is not supported for the package ecosystem 'github-actions'. |
The PR description says the above but there's no target-branch, is this intended for main? |
3 participants
Adds dependabot.yml to keep Swift Package Manager dependencies, Ruby bundler gems, and GitHub Actions up to date on a daily schedule with 7-day cooldown. PRs target the dependency-updates branch.