Skip to content

Adjust Dependabot pip updates to only widen requirements when needed#291

Merged
timlaing merged 1 commit into
mainfrom
copilot/update-dependabot-strategy-for-pip
Jun 30, 2026
Merged

Adjust Dependabot pip updates to only widen requirements when needed#291
timlaing merged 1 commit into
mainfrom
copilot/update-dependabot-strategy-for-pip

Conversation

Copilot AI commented Jun 30, 2026

Copy link
Copy Markdown

This updates the pip Dependabot strategy to align with an “update if necessary” policy. Pip dependency updates now avoid unnecessarily broadening version ranges.

  • Problem addressed

    • The repository needed pip Dependabot behavior that updates dependencies without aggressively changing version constraints.
  • Configuration change

    • Added versioning-strategy: "increase-if-necessary" to the pip update block in .github/dependabot.yml.
    • Kept existing schedule and labels unchanged.
  • Resulting behavior

    • Dependabot will raise pip dependency versions while preserving current requirement bounds unless a bound increase is required for the update.
- package-ecosystem: "pip"
  directory: "/"
  versioning-strategy: "increase-if-necessary"
  schedule:
    interval: weekly

@timlaing timlaing marked this pull request as ready for review June 30, 2026 18:40
Copilot AI review requested due to automatic review settings June 30, 2026 18:40

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@timlaing timlaing merged commit d3174db into main Jun 30, 2026
23 checks passed
@timlaing timlaing deleted the copilot/update-dependabot-strategy-for-pip branch June 30, 2026 20:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants