From 6292df86ef76fccd90a45ec2e9d216e0aa472923 Mon Sep 17 00:00:00 2001 From: Adrienne Stilp Date: Mon, 18 Dec 2023 11:10:17 -0800 Subject: [PATCH 1/2] Run dependabot weekly on Sundays --- .github/dependabot.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e00ba64e..4b0f88f3 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,7 +4,8 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "daily" + interval: "weekly" + day: "sunday" # Enable version updates for Python/Pip - Production - package-ecosystem: "pip" @@ -13,7 +14,8 @@ updates: directory: "/" # Check for updates to GitHub Actions every weekday schedule: - interval: "daily" + interval: "weekly" + day: "sunday" allow: # Allow both direct and indirect updates for all packages - dependency-type: "all" From 59ad3e4f0a239b4f91f221ad49567a12f829ce4f Mon Sep 17 00:00:00 2001 From: Adrienne Stilp Date: Mon, 18 Dec 2023 11:10:32 -0800 Subject: [PATCH 2/2] Allow up to 10 dependabot pull requests Since we'll be running it weekly, we should expect to have more packages being updated. --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 4b0f88f3..750edb2f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -19,3 +19,5 @@ updates: allow: # Allow both direct and indirect updates for all packages - dependency-type: "all" + # Allow up to 10 dependencies for pip dependencies + open-pull-requests-limit: 10