diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b2aa9468..25541e6e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,10 +1,15 @@ version: 2 updates: # Python dependencies + # Dependabot supports uv version updates, but GitHub currently lists uv + # security updates as "Not applicable"; daily checks keep uv.lock moving + # while repo-level Dependabot alerts/security updates cover supported ecosystems. - package-ecosystem: "uv" directory: "/" schedule: - interval: "weekly" + interval: "daily" + time: "05:00" + timezone: "Europe/London" open-pull-requests-limit: 10 groups: python-deps: