From bff0be8d6fb833c5bc7a2c56369c18774b00e4b7 Mon Sep 17 00:00:00 2001 From: Stefan Haller Date: Tue, 31 Mar 2026 12:12:10 +0200 Subject: [PATCH 1/2] Remove the allowed_updates key This isn't a valid key, and according to claude it's not possible to configure it to get only security updates (I'm too lazy to read the docs). I suppose this means we will now get pull requests for any updated dependencies, but maybe that's useful; we'll see how annoying this gets. --- .github/dependabot.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 71e2bd80d..f1b219b47 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,6 +4,3 @@ updates: directory: "/" schedule: interval: "weekly" - allowed_updates: - - match: - update_type: "security" From 463433996e22122bf7d8bfe2340290a4f8cb3157 Mon Sep 17 00:00:00 2001 From: Stefan Haller Date: Tue, 31 Mar 2026 12:12:48 +0200 Subject: [PATCH 2/2] Add dependabot config for github actions Again, let's see how often these trigger and if it gets annoying. --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f1b219b47..c507d4494 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,3 +4,7 @@ updates: directory: "/" schedule: interval: "weekly" + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly"