From 710af36ed1f69e7c5c81bb09fcd96f8dd3f83a70 Mon Sep 17 00:00:00 2001 From: Nikhil Arora Date: Fri, 28 Aug 2026 12:04:18 +0530 Subject: [PATCH] Add weekly Dependabot updates This commit adds a Dependabot configuration to check for updates weekly for pip dependencies and GitHub Actions. The changelog is updated to record the new automation. --- .github/dependabot.yml | 15 +++++++++++++++ CHANGELOG.md | 2 ++ 2 files changed, 17 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..e1a1cf2 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,15 @@ +version: 2 +updates: + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "weekly" + commit-message: + prefix: "chore" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + commit-message: + prefix: "chore" diff --git a/CHANGELOG.md b/CHANGELOG.md index 7838e08..6046d4e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,8 @@ All notable changes to this project are documented in this file. ## Unreleased +- Added `.github/dependabot.yml`: weekly version updates for `pip` + dependencies and GitHub Actions. - Added GitHub issue templates: `.github/ISSUE_TEMPLATE/bug_report.yml`, `feature_request.yml`, and a `config.yml` that points security reports at private vulnerability reporting instead of a public issue.