Skip to content

ci: add dependabot configuration for actions, npm and cargo - #1698

Open
genZIn4532 wants to merge 1 commit into
DistinctCodes:mainfrom
genZIn4532:ci/add-dependabot-configuration-1652
Open

genZIn4532 wants to merge 1 commit into
DistinctCodes:mainfrom
genZIn4532:ci/add-dependabot-configuration-1652

Conversation

@genZIn4532

@genZIn4532 genZIn4532 commented Nov 3, 2026 •

Copy link
Copy Markdown

Problem

There is currently no .github/dependabot.yml in the repository. Dependencies across backend (npm), frontend (npm), contracts (cargo), and GitHub Actions workflows are only audited manually or via weekly scheduled cargo audits.

Solution

Added .github/dependabot.yml covering:

  • / for github-actions workflows on a weekly schedule.
  • /backend for npm dependencies on a weekly schedule with grouped minor/patch updates.
  • /frontend for npm dependencies on a weekly schedule with grouped minor/patch updates.
  • /contracts for cargo dependencies on a weekly schedule with grouped minor/patch updates.
  • Configured labels to only use existing repository labels (devops, backend, frontend, contract).
  • Limited open pull requests to 10 per ecosystem.

Closes #1652

@vercel

vercel Bot commented Nov 3, 2026

Copy link
Copy Markdown

@genZIn4532 is attempting to deploy a commit to the naijabuz's projects Team on Vercel.

A member of the Team first needs to authorize it.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add Dependabot for npm, cargo and GitHub Actions

1 participant