Skip to content

chore: add Dependabot dependency update automation#118

Open
j-kon wants to merge 1 commit into
bitcoindevkit:mainfrom
j-kon:dependabot-automation
Open

chore: add Dependabot dependency update automation#118
j-kon wants to merge 1 commit into
bitcoindevkit:mainfrom
j-kon:dependabot-automation

Conversation

@j-kon

@j-kon j-kon commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add Dependabot version-update configuration
  • monitor root Dart/pub dependencies
  • monitor Flutter dependencies under bdk_demo
  • monitor Rust dependencies under native
  • monitor GitHub Actions used by repository workflows
  • group minor and patch updates to reduce pull request noise
  • run dependency checks weekly

Update policy

Minor and patch dependency updates are grouped by ecosystem.

Major dependency updates are intentionally left outside the groups so Dependabot can open them separately for focused review.

Scope

This PR only adds:

  • .github/dependabot.yml

It does not:

  • update dependency versions
  • modify lockfiles
  • change CI behavior
  • enable automatic merging
  • change native build or release logic

Validation

  • confirmed valid Dependabot version 2 configuration structure
  • confirmed package ecosystem directories match repository manifests
  • confirmed CI passes
  • confirmed the PR contains only the intended Dependabot configuration

Closes #85

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore: add Dependabot dependency update automation

1 participant