Skip to content

Add Dependabot configuration for Composer, npm, and GitHub Actions - #274

Merged
sirreal merged 2 commits into
masterfrom
copilot/setup-dependabot-configuration
Aug 11, 2026
Merged

Add Dependabot configuration for Composer, npm, and GitHub Actions#274
sirreal merged 2 commits into
masterfrom
copilot/setup-dependabot-configuration

Conversation

CopilotAI commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

This adds a standard Dependabot v2 configuration for the dependency ecosystems already used in the repository, with all update PRs targeting master. The config covers Composer, npm, and GitHub Actions on a weekly schedule.

  • Dependabot configuration

    • Add .github/dependabot.yml
    • Set version: 2
    • Configure updates for:
      • composer in /
      • npm in /
      • github-actions in /
  • PR targeting

    • Set target-branch: master for each ecosystem so automated dependency update PRs are opened against the repository’s base branch
  • Schedule

    • Use a conventional weekly cadence for all update entries
version: 2updates:
- package-ecosystem: composerdirectory: /schedule:
interval: weeklytarget-branch: master
- package-ecosystem: npmdirectory: /schedule:
interval: weeklytarget-branch: master
- package-ecosystem: github-actionsdirectory: /schedule:
interval: weeklytarget-branch: master

Co-authored-by: sirreal <841763+sirreal@users.noreply.github.com>
CopilotAI changed the title [WIP] Add Dependabot configuration file for managing dependenciesAdd Dependabot configuration for Composer, npm, and GitHub ActionsAug 11, 2026
CopilotAI requested a review from sirrealAugust 11, 2026 08:38
@sirreal
sirreal marked this pull request as ready for review August 11, 2026 08:38
@sirreal
sirreal merged commit c7bfcbf into masterAug 11, 2026
5 checks passed
@sirreal
sirreal deleted the copilot/setup-dependabot-configuration branch August 11, 2026 08:39
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@sirreal