diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b2aa9468..691dedff 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,10 +1,17 @@ version: 2 updates: # Python dependencies + # Dependabot supports uv version updates, but GitHub currently lists uv + # security updates as "Not applicable"; daily checks keep uv.lock moving + # while repo-level Dependabot alerts/security updates cover supported ecosystems. - package-ecosystem: "uv" directory: "/" schedule: - interval: "weekly" + interval: "daily" + time: "05:00" + timezone: "Europe/London" + cooldown: + default-days: 3 open-pull-requests-limit: 10 groups: python-deps: @@ -16,6 +23,8 @@ updates: directory: "/src/frontend" schedule: interval: "weekly" + cooldown: + default-days: 3 open-pull-requests-limit: 10 groups: npm-deps: @@ -27,6 +36,8 @@ updates: directory: "/" schedule: interval: "weekly" + cooldown: + default-days: 3 open-pull-requests-limit: 5 groups: docker-images: @@ -43,6 +54,8 @@ updates: directory: "/" schedule: interval: "weekly" + cooldown: + default-days: 3 open-pull-requests-limit: 5 groups: gh-actions: