From 5083d94057b81514a5b505f1bae37d41fbdf8582 Mon Sep 17 00:00:00 2001
From: Tim Stranske <stranske@gmail.com>
Date: Mon, 15 Jun 2026 00:07:06 -0500
Subject: [PATCH] =?UTF-8?q?chore(renovate):=20P3b=20=E2=80=94=20remove=20D?=
 =?UTF-8?q?ependabot=20config=20from=20consumer=20template?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Completes the per-consumer Dependabot removal (P3a) on the source side: the
consumer template no longer ships .github/dependabot.yml, so maint-68 stops
re-adding it to consumers that had it removed (create_only re-creates a missing
file — without this, every re-sync would resurrect Dependabot and re-open the
dual-run). New consumers get only the Renovate fleet preset.

Removes templates/consumer-repo/.github/dependabot.yml + its sync-manifest entry.
Leaves dependabot-automerge.yml + maint-dependabot-* for P4 cleanup (they no-op
without Dependabot PRs and don't cause the re-add).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/sync-manifest.yml                     |  5 --
 .../consumer-repo/.github/dependabot.yml      | 68 -------------------
 2 files changed, 73 deletions(-)
 delete mode 100644 templates/consumer-repo/.github/dependabot.yml

diff --git a/.github/sync-manifest.yml b/.github/sync-manifest.yml
index 9b9514602..af8f8dcae 100644
--- a/.github/sync-manifest.yml
+++ b/.github/sync-manifest.yml
@@ -122,11 +122,6 @@ workflows:
   - source: .github/workflows/maint-76-claude-code-review.yml
     description: "Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch"
 
-  # Dependabot configuration and automation
-  - source: .github/dependabot.yml
-    description: "Dependabot config - ignores dev tools synced via maint-52"
-    sync_mode: create_only
-
   # Renovate configuration - extends the shared fleet preset (renovate-presets/fleet.json).
   # create_only so a consumer that already onboarded (e.g. a Mend generic config) is not clobbered;
   # supersedes per-repo Renovate onboarding by giving consumers the fleet preset (dev-tool exclusions
diff --git a/templates/consumer-repo/.github/dependabot.yml b/templates/consumer-repo/.github/dependabot.yml
deleted file mode 100644
index 17753190b..000000000
--- a/templates/consumer-repo/.github/dependabot.yml
+++ /dev/null
@@ -1,68 +0,0 @@
-# Dependabot configuration for consumer repos
-# Dev tools are synced from stranske/Workflows - DO NOT update them here
-# 
-# Flow: Workflows (Dependabot) -> autofix-versions.env -> maint-52 sync -> this repo
-
-version: 2
-updates:
-  # Python dependencies
-  - package-ecosystem: "pip"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "09:00"
-      timezone: "America/New_York"
-    open-pull-requests-limit: 10
-    reviewers:
-      - "stranske"
-    labels:
-      - "dependencies"
-      - "python"
-    commit-message:
-      prefix: "deps"
-      include: "scope"
-    # Ignore dev tools - synced from stranske/Workflows via maint-52
-    ignore:
-      - dependency-name: "ruff"
-      - dependency-name: "black"
-      - dependency-name: "mypy"
-      - dependency-name: "pytest"
-      - dependency-name: "pytest-cov"
-      - dependency-name: "pytest-xdist"
-      - dependency-name: "isort"
-      - dependency-name: "docformatter"
-      - dependency-name: "coverage"
-      - dependency-name: "hypothesis"
-    groups:
-      runtime-minor:
-        patterns:
-          - "*"
-        update-types:
-          - "minor"
-          - "patch"
-
-  # GitHub Actions
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "09:00"
-      timezone: "America/New_York"
-    open-pull-requests-limit: 5
-    reviewers:
-      - "stranske"
-    labels:
-      - "dependencies"
-      - "github-actions"
-    commit-message:
-      prefix: "ci"
-      include: "scope"
-    groups:
-      actions-minor:
-        patterns:
-          - "*"
-        update-types:
-          - "minor"
-          - "patch"