From a13d602b03e7ecea031539995ae42113f20f6d1c Mon Sep 17 00:00:00 2001 From: Joris Wouter Jonkers <74975850+ExtraToast@users.noreply.github.com> Date: Wed, 21 Oct 2026 13:27:23 +0200 Subject: [PATCH] chore: Renovate alone updates dependencies, so Dependabot's fallback goes --- .github/dependabot.yml | 34 ---------------------------------- 1 file changed, 34 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index cbecd68..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,34 +0,0 @@ -# Renovate (renovate.json) is the primary dependency manager for JorisJonkers-dev -# repos. Dependabot is enabled only for GitHub Actions as a belt-and-braces -# fallback; disable this file if Renovate covers actions in a given repo. -# -# Keep the same dependency policy shape as the richer templates under -# templates/dependency-policy/: 7-day cooldown for third-party releases (our own -# org is excluded), grouped minor/patch updates, -# separate security grouping, and isolated majors. -version: 2 -updates: - - package-ecosystem: github-actions - directory: "/" - schedule: - interval: weekly - cooldown: - default-days: 7 - # Our own releases are already gated by their publishing repo's - # pipeline, so a cooldown only delays first-party propagation. - exclude: - - "JorisJonkers-dev/*" - open-pull-requests-limit: 5 - groups: - actions: - applies-to: version-updates - update-types: - - minor - - patch - patterns: - - "*" - actions-security: - applies-to: security-updates - patterns: - - "*" - labels: ["dependencies", "github_actions"]