From ab1092923a7c10b87cb28d8baca54131ce9a2ba3 Mon Sep 17 00:00:00 2001
From: Joe Fusco <hello@josephfus.co>
Date: Fri, 23 Oct 2026 22:18:28 -0400
Subject: [PATCH] chore: cover every plugin with one Dependabot composer entry

- Replace the six per-plugin composer entries with one /plugins/* glob, so new plugins
  are covered without editing this file.
- Remove the eight docker entries. The Dockerfiles build their tag from ARGs, which
  Dependabot can't update, and the docker ecosystem doesn't read docker-compose.yml.
  None of them has opened a PR.
- Scan the composite actions in .github/actions too, not just the workflows.
---
 .github/dependabot.yaml | 132 +++-------------------------------------
 1 file changed, 7 insertions(+), 125 deletions(-)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index f8dd7abe..720d4aa0 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -12,9 +12,10 @@ updates:
       prefix: "deps"
       prefix-development: "chore(deps-dev)"
 
-  # composer (plugins)
+  # composer (every plugin, so new plugins are covered without an entry here)
   - package-ecosystem: "composer"
-    directory: "/plugins/hwp-documents"
+    directories:
+      - "/plugins/*"
     schedule:
       interval: "weekly"
     ignore:
@@ -24,130 +25,11 @@ updates:
       prefix: "deps"
       prefix-development: "chore(deps-dev)"
 
-  - package-ecosystem: "composer"
-    directory: "/plugins/hwp-cli"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-    commit-message:
-      prefix: "deps"
-      prefix-development: "chore(deps-dev)"
-
-  - package-ecosystem: "composer"
-    directory: "/plugins/hwp-previews"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-    commit-message:
-      prefix: "deps"
-      prefix-development: "chore(deps-dev)"
-
-  - package-ecosystem: "composer"
-    directory: "/plugins/wpgraphql-debug-extensions"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-    commit-message:
-      prefix: "deps"
-      prefix-development: "chore(deps-dev)"
-
-  - package-ecosystem: "composer"
-    directory: "/plugins/wpgraphql-logging"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-    commit-message:
-      prefix: "deps"
-      prefix-development: "chore(deps-dev)"
-
-  - package-ecosystem: "composer"
-    directory: "/plugins/wpgraphql-webhooks"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-    commit-message:
-      prefix: "deps"
-      prefix-development: "chore(deps-dev)"
-
-  # docker (Dockerfiles)
-  - package-ecosystem: "docker"
-    directory: "/plugins/hwp-documents/.docker"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-
-  - package-ecosystem: "docker"
-    directory: "/plugins/hwp-previews/.docker"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-
-  - package-ecosystem: "docker"
-    directory: "/plugins/wpgraphql-logging/.docker"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-
-  # docker (docker-compose)
-  - package-ecosystem: "docker"
-    directory: "/plugins/hwp-documents"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-
-  - package-ecosystem: "docker"
-    directory: "/plugins/hwp-previews"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-
-  - package-ecosystem: "docker"
-    directory: "/plugins/wpgraphql-debug-extensions"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-
-  - package-ecosystem: "docker"
-    directory: "/plugins/wpgraphql-logging"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-
-  - package-ecosystem: "docker"
-    directory: "/plugins/wpgraphql-webhooks"
-    schedule:
-      interval: "weekly"
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
-
-  # github-actions
+  # github-actions (workflows and the composite actions they use)
   - package-ecosystem: "github-actions"
-    directory: "/.github/workflows"
+    directories:
+      - "/"
+      - "/.github/actions/*"
     schedule:
       interval: "weekly"
     ignore: