Files
Juan Denis 7476e216b8 Add Dependabot updates targeting dev
There was no Dependabot config, and its default PRs to main fail the
promotion gate. Weekly grouped minor/patch updates for backend and
frontend, monthly for GitHub Actions, all against dev.
2026-10-10 18:35:00 -04:00

35 lines
804 B
YAML

# Dependency update PRs target dev (main only accepts promotions from dev).
# Grouped and weekly so they arrive as a few reviewable PRs, not a stream.
version: 2
updates:
- package-ecosystem: pip
directory: /backend
target-branch: dev
schedule:
interval: weekly
open-pull-requests-limit: 5
groups:
backend:
patterns: ["*"]
update-types: [minor, patch]
- package-ecosystem: npm
directory: /frontend
target-branch: dev
schedule:
interval: weekly
open-pull-requests-limit: 5
groups:
frontend:
patterns: ["*"]
update-types: [minor, patch]
- package-ecosystem: github-actions
directory: /
target-branch: dev
schedule:
interval: monthly
groups:
actions:
patterns: ["*"]