Skip to content

Configure Dependabot for weekly dependency updates#531

Open
YousifSala7 wants to merge 1 commit into
Fallout-build:mainfrom
YousifSala7:chore/6-add-dependabot
Open

Configure Dependabot for weekly dependency updates#531
YousifSala7 wants to merge 1 commit into
Fallout-build:mainfrom
YousifSala7:chore/6-add-dependabot

Conversation

@YousifSala7

Copy link
Copy Markdown
Contributor

Closes #6

Description:
Added Dependabot configuration to automate dependency updates for NuGet, .NET SDK, and GitHub Actions ecosystems.

Changes:

  • Configured the nuget ecosystem to monitor Directory.Packages.props.
  • Configured the dotnet-sdk ecosystem to monitor global.json.
  • Configured the github-actions ecosystem to monitor .github/workflows/.
  • Set schedule to weekly and utilized groups for nuget and github-actions to bundle version updates into a single PR per ecosystem.
  • Documented the dependency update strategy in AGENTS.md (as CLAUDE.md delegates its context there).

@ITaluone

Copy link
Copy Markdown
Collaborator

Cool

Let's see if we have more luck with this :)

I am trying this already (manually), but had no luck so far. Especially, if it comes towards updating dependencies for code analysis, source generation,... it has very strange side effects. I think the netstandard2.0 burden kicks in here as well

@ChrisonSimtian ChrisonSimtian left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm except for the gh actions one, fallout will keep overriding this, lets not do that for now ok? I like the thought though, lets leave it there either as a todo, a separate PR or commented out

Comment thread .github/dependabot.yml Outdated
@YousifSala7
YousifSala7 force-pushed the chore/6-add-dependabot branch from 96dd59b to 520ae52 Compare July 23, 2026 11:57
@ITaluone
ITaluone enabled auto-merge (rebase) July 23, 2026 13:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add Dependabot (or Renovate) for dependency updates

3 participants