From 7ac02f59aa1de2a53cc5709755fd44d8dba4c75a Mon Sep 17 00:00:00 2001 From: Bruno Saxoni <789709+brinxmat@users.noreply.github.com> Date: Wed, 1 Apr 2026 11:10:07 +0200 Subject: [PATCH 1/2] Add Dependabot configuration for dependency updates Configured Dependabot to update GitHub Actions and Gradle dependencies weekly with specified cooldown and grouping for updates. Cooldown helps us avoid supply chain attacks. --- .github/dependabot.yml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..e19d0af --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,30 @@ +version: 2 + +updates: + # Update GitHub Actions workflows + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + labels: + - "dependencies" + cooldown: + default-days: 7 + + # Update Gradle dependencies (version catalogs + build plugins) + - package-ecosystem: "gradle" + directory: "/" + schedule: + interval: "weekly" + labels: + - "dependencies" + cooldown: + default-days: 7 + # Groups help reduce PR noise by batching related updates + groups: + patch-updates: + update-types: + - "patch" + minor-updates: + update-types: + - "minor" From 852614246c73ec9958097546fd4c8c172fc5dd83 Mon Sep 17 00:00:00 2001 From: Bruno Saxoni <789709+brinxmat@users.noreply.github.com> Date: Wed, 1 Apr 2026 11:12:38 +0200 Subject: [PATCH 2/2] Clean up dependabot.yml by removing comments Removed comments for GitHub Actions and Gradle updates. --- .github/dependabot.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e19d0af..bebd5cf 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,7 +1,6 @@ version: 2 updates: - # Update GitHub Actions workflows - package-ecosystem: "github-actions" directory: "/" schedule: @@ -10,8 +9,6 @@ updates: - "dependencies" cooldown: default-days: 7 - - # Update Gradle dependencies (version catalogs + build plugins) - package-ecosystem: "gradle" directory: "/" schedule: @@ -20,7 +17,6 @@ updates: - "dependencies" cooldown: default-days: 7 - # Groups help reduce PR noise by batching related updates groups: patch-updates: update-types: