Skip to content

Add Dependabot configuration for uv and npm#34

Open
juhoinkinen wants to merge 1 commit intomainfrom
config-dependabot-for-uv-and-npm
Open

Add Dependabot configuration for uv and npm#34
juhoinkinen wants to merge 1 commit intomainfrom
config-dependabot-for-uv-and-npm

Conversation

@juhoinkinen
Copy link
Copy Markdown
Member

PR #6 added the .github/dependabot.yml file with config only for GH Actions updates.

Now this adds configs also for uv and npm controlled dependencies, and groups all updates to a single PR and uses 10 days cooldown for all dependecies.

@juhoinkinen juhoinkinen added this to the 0.1 milestone May 5, 2026
@juhoinkinen juhoinkinen added the dependencies Pull requests that update a dependency file label May 5, 2026
@codecov-commenter
Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.58%. Comparing base (c0d74a6) to head (5180455).

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #34   +/-   ##
=======================================
  Coverage   95.58%   95.58%           
=======================================
  Files           6        6           
  Lines          68       68           
=======================================
  Hits           65       65           
  Misses          3        3           
Flag Coverage Δ
unittests 95.58% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@osma osma requested a review from Copilot May 6, 2026 06:52
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Expands the repository’s Dependabot setup beyond GitHub Actions to also cover application dependencies, aiming to group updates into a single PR with a shared cadence/cooldown.

Changes:

  • Introduces a multi-ecosystem-groups section intended to centralize scheduling/cooldown behavior.
  • Adds Dependabot update entries for uv and npm, and assigns all ecosystems to the same group.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/dependabot.yml
Comment on lines +3 to 8
multi-ecosystem-groups:
all:
schedule:
interval: "monthly"
cooldown:
default-days: 10
Comment thread .github/dependabot.yml
directories:
- "/.github/workflows"
multi-ecosystem-group: "all"
- package-ecosystem: "uv"
Comment thread .github/dependabot.yml
Comment on lines +12 to +21
directories:
- "/.github/workflows"
multi-ecosystem-group: "all"
- package-ecosystem: "uv"
directories:
- "/"
multi-ecosystem-group: "all"
- package-ecosystem: "npm"
directories:
- "/"
Copy link
Copy Markdown
Member

@osma osma left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like the Copilot review is at least partly rubbish. Anyway, might be worth checking out. LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants