# Dependabot configuration for socket-python-cli. # # Design notes: # - Python deps are grouped into a weekly PR (minor/patch). # - GitHub Actions are grouped similarly into one weekly PR. # - Docker (the project Dockerfile) is tracked separately. # - 7-day cooldown enforced across all ecosystems. version: 2 updates: # Main app Python deps (uv-tracked) - package-ecosystem: "uv" directory: "/" schedule: interval: "weekly" open-pull-requests-limit: 2 groups: python-minor-patch: patterns: - "*" update-types: - "minor" - "patch" python-major: patterns: - "*" update-types: - "major" labels: - "dependencies" - "python:uv" commit-message: prefix: "chore" include: "scope" cooldown: default-days: 7 # GitHub Actions used in workflows and local composite actions. - package-ecosystem: "github-actions" directories: - "/" - "/.github/actions/*" schedule: interval: "weekly" open-pull-requests-limit: 2 groups: github-actions-minor-patch: patterns: - "*" update-types: - "minor" - "patch" labels: - "dependencies" - "github-actions" commit-message: prefix: "ci" include: "scope" cooldown: default-days: 7 # Project Dockerfile base images and pinned binaries - package-ecosystem: "docker" directory: "/" schedule: interval: "weekly" open-pull-requests-limit: 2 labels: - "dependencies" - "docker" commit-message: prefix: "chore" include: "scope" cooldown: default-days: 7