From 77a82e4a593ef1f04eff26c8269deb7d0daf27ba Mon Sep 17 00:00:00 2001 From: Jack Champagne Date: Wed, 8 Jul 2026 01:49:37 -0400 Subject: [PATCH] =?UTF-8?q?chore:=20dependabot=20=E2=80=94=20monthly=20gro?= =?UTF-8?q?uped=20actions=20only=20(thin-fork=20scope)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/dependabot.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..b45b67683 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,18 @@ +# AMICODE fork: deliberately NARROW dependabot scope. +# +# This is a thin fork of sst/opencode with a patch stack (AMICODE-PATCHES.md). +# Package updates (bun.lock, npm) must come from UPSTREAM merges — dependabot +# bumping them here would grow the patch stack and diverge the lockfile from +# upstream for no benefit. Only workflow actions are watched, monthly and +# grouped, chiefly for our own release automation (amicode-release.yml). +# An actions PR that only touches upstream workflow files can be closed. +version: 2 +updates: + - package-ecosystem: github-actions + directory: "/" + schedule: + interval: monthly + open-pull-requests-limit: 2 + groups: + actions: + patterns: ["*"]