Skip to content

Add initial Dependabot config#206

Merged
yanyi-wego merged 1 commit into
mainfrom
codex/add-dependabot-yaml
Jun 11, 2026
Merged

Add initial Dependabot config#206
yanyi-wego merged 1 commit into
mainfrom
codex/add-dependabot-yaml

Conversation

@yanyi-wego

Copy link
Copy Markdown
Contributor

Summary

Adds the repository's first Dependabot configuration for the Go modules in this multi-module repo and for the existing GitHub Actions workflow. This enables routine dependency update PRs without maintaining each module and workflow dependency by hand.

Approach

  • Multi-module coverage: uses one gomod update entry with directories for each real module root in the repo.
  • PR volume control: groups Go updates by dependency name so the same dependency can be updated across modules in fewer PRs.
  • Fixture exclusion by omission: leaves the testdata sample modules out so Dependabot does not open noise-only PRs for test fixtures.
  • Workflow maintenance: adds a github-actions update entry for /.github/workflows using directory: "/", which matches GitHub's documented behavior.
  • Minimal first config: keeps the schedule weekly and avoids extra labels, reviewers, or registry settings until the repo has a baseline update flow.

This repo is a multi-module Go worktree with shared CI workflows, so
Dependabot needs explicit coverage for each module root and GitHub
Actions. Adding the first config enables routine dependency updates
without relying on ad hoc manual maintenance.

Co-authored-by: Codex <noreply@openai.com>
@yanyi-wego yanyi-wego marked this pull request as ready for review June 11, 2026 08:59
@yanyi-wego yanyi-wego merged commit 332e5f7 into main Jun 11, 2026
2 checks passed
@yanyi-wego yanyi-wego deleted the codex/add-dependabot-yaml branch June 11, 2026 09:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants