chore(deps): add detection-only dependabot.yml (Renovate sole PR-opener)#47
Conversation
|
Warning Review limit reached
More reviews will be available in 44 minutes and 34 seconds. Learn how PR review limits work. Your organization has run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After more reviews become available, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available. Please see our Fair Usage Limits Policy for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Run ID: 📒 Files selected for processing (1)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
This PR introduces a .github/dependabot.yml intended to keep Dependabot in “detection-only” mode while continuing to use Renovate as the sole dependency-update PR opener.
Changes:
- Add Dependabot v2 configuration for
pipandgithub-actionsecosystems. - Set update cadence to weekly for both ecosystems.
- Attempt to disable Dependabot PR creation via
open-pull-requests-limit: 0(see PR comments).
| # Detection-only: Renovate is the sole PR-opener. open-pull-requests-limit: 0 | ||
| # suppresses Dependabot version PRs. Dependabot alerts (a repo setting) remain | ||
| # the multi-ecosystem detection ledger. Refs: standards CI-021 (amended), CI-074. | ||
| updates: | ||
| - package-ecosystem: "pip" # Python: pyproject.toml / requirements / uv | ||
| directory: "/" | ||
| schedule: | ||
| interval: "weekly" | ||
| open-pull-requests-limit: 0 | ||
| - package-ecosystem: "github-actions" # if .github/workflows/ present | ||
| directory: "/" | ||
| schedule: | ||
| interval: "weekly" | ||
| open-pull-requests-limit: 0 |
|
Adds a detection-only
.github/dependabot.ymlwithopen-pull-requests-limit: 0for each ecosystem, keeping Renovate as the sole PR-opener while Dependabot alerts (a repo setting) remain the multi-ecosystem detection ledger.Ecosystems included (manifests verified present in clone):
pip(pyproject.toml + uv.lock)github-actions(.github/workflows/ present)Refs: standards CI-021 (amended), CI-074. Stage 4 Cat A.