Skip to content

Add Dependabot for Actions and Python deps #29

Open
Open
Add Dependabot for Actions and Python deps#29
Labels
area:ciActions / workflows / publishingciContinuous integrationenhancementNew feature or requestgood first issueGood for newcomerspriority:p0Do now — hygiene / release blockers
Milestone
Project hygiene

Description

@askmy-stack
askmy-stack
opened on Jul 14, 2026

Summary

There is no `.github/dependabot.yml`. Action and pip pins will rot without automated PRs.

Acceptance criteria

  • Add `.github/dependabot.yml` with:
    • `package-ecosystem: github-actions` (weekly)
    • `package-ecosystem: pip` (weekly; directory `/`)
  • Optional: group minor/patch updates to reduce noise
  • Short note in CONTRIBUTING or docs that Dependabot PRs are welcome

Why

Supply-chain hygiene for CI and publish workflows.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:ciActions / workflows / publishingciContinuous integrationenhancementNew feature or requestgood first issueGood for newcomerspriority:p0Do now — hygiene / release blockers

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions