Skip to content

chore(deps): align Dependabot config with the org supply chain baseline - #4

Open
Moritz Mazetti (Radiergummi) wants to merge 1 commit into
mainfrom
chore/dependabot-org-baseline
Open

Moritz Mazetti (Radiergummi) wants to merge 1 commit into
mainfrom
chore/dependabot-org-baseline

Conversation

@Radiergummi

Copy link
Copy Markdown
Member

The repo is on the September multi-ecosystem-groups layout. That layout ignores update-types (dependabot-core#13572), so majors were bundled into the weekly group, and security updates arrived one PR per advisory. This switches to the per-ecosystem org template: minor and patch grouped per ecosystem, majors one PR each, a security group per ecosystem, and a 3-day cooldown.

🤖 Generated with Claude Code

https://claude.ai/code/session_018rbNSgXszHsJUz325prezd

Minor and patch updates grouped per ecosystem, majors one PR each,
security updates grouped, 3-day cooldown.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_018rbNSgXszHsJUz325prezd
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant