From d1f4c74b037d4c95992477722b5aac592ed9a20d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Est=C3=A9fano=20Vechietti?= <311154804+estefano-vechietti-azion@users.noreply.github.com> Date: Tue, 22 Sep 2026 16:31:25 -0300 Subject: [PATCH] chore(deps): add Dependabot version updates config Adds .github/dependabot.yml following the Azion standard (get_workflow_guide('dependabot')). Addresses the OSSF Scorecard Dependency-Update-Tool check. Co-Authored-By: Claude Opus 5 (1M context) --- .github/dependabot.yml | 49 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000000..10e7caf4fe --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,49 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + cooldown: + default-days: 7 + open-pull-requests-limit: 5 + labels: + - "dependencies" + - "github-actions" + commit-message: + prefix: "chore" + include: "scope" + groups: + azion-actions: + patterns: + - "aziontech/azion-action-*" + github-actions: + patterns: + - "actions/*" + third-party-actions: + patterns: + - "*" + exclude-patterns: + - "actions/*" + - "aziontech/azion-action-*" + + - package-ecosystem: "npm" + directories: + - "/" + - "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/backend/semrush-replace-url" + schedule: + interval: "weekly" + day: "monday" + cooldown: + default-days: 7 + open-pull-requests-limit: 10 + labels: + - "dependencies" + commit-message: + prefix: "chore" + include: "scope" + groups: + minor-and-patch: + patterns: ["*"] + update-types: ["minor", "patch"]