aaronsb_obsidian-mcp-plugin/.github/dependabot.yml
Aaron Bockelie a49e4df1ec ci: Enable Dependabot for automated dependency updates
Configure Dependabot to:
- Check npm dependencies weekly (Mondays at 9am)
- Group patch/minor updates by dependency type
- Check GitHub Actions versions weekly
- Auto-label PRs with 'dependencies' and 'automated'

Also enabled vulnerability alerts and security updates via GitHub API.
2025-12-03 12:43:00 -06:00

42 lines
980 B
YAML

version: 2
updates:
# Enable version updates for npm
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
open-pull-requests-limit: 10
# Group all patch and minor updates together
groups:
development-dependencies:
dependency-type: "development"
update-types:
- "minor"
- "patch"
production-dependencies:
dependency-type: "production"
update-types:
- "minor"
- "patch"
# Auto-approve security patches
labels:
- "dependencies"
- "automated"
commit-message:
prefix: "chore"
include: "scope"
# Enable version updates for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "09:00"
labels:
- "dependencies"
- "github-actions"
commit-message:
prefix: "ci"