Skip to content

Dependabot configuration for Go modules and npm dependencies and CODEOWNERS #86

Open
brooke-hamilton wants to merge 1 commit intomainfrom
brooke-hamilton/dependabot-config
Open

Dependabot configuration for Go modules and npm dependencies and CODEOWNERS #86
brooke-hamilton wants to merge 1 commit intomainfrom
brooke-hamilton/dependabot-config

Conversation

@brooke-hamilton
Copy link
Copy Markdown
Member

Summary

This PR adds automated dependency update configuration for the blog repository:

Changes

.github/dependabot.yml

  • Added Go module (gomod) package ecosystem tracking for /radblog directory
  • Added npm package ecosystem tracking for /radblog directory
  • Both ecosystems configured with weekly update schedules and grouped updates

.github/CODEOWNERS

  • Extended ownership rules to allow the @radius-project/on-call team to approve dependency-related PRs
  • Added rules for: go.mod, go.sum, package.json, package-lock.json, .node-version, GitHub Actions workflows, and GitHub config files

This enables Dependabot to automatically create PRs for outdated dependencies while allowing the on-call team to efficiently review and merge these updates.

Signed-off-by: Brooke Hamilton <45323234+brooke-hamilton@users.noreply.github.com>
@github-actions
Copy link
Copy Markdown

Static Web App Preview

Environment Deployment
pr86 View workflow run

Deployed from commit 449f48f83f239709d80d3888c58148ac8a85177f via the publisher workflow.

@brooke-hamilton brooke-hamilton changed the title Dependabot configuration for Go modules and npm dependencies Dependabot configuration for Go modules and npm dependencies and CODEOWNERS Mar 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant