From cd3ee91875b98f52232882a6f1e9727435c0f301 Mon Sep 17 00:00:00 2001
From: Andrew <achapkowski@users.noreply.github.com>
Date: Tue, 25 Aug 2026 09:22:21 -0400
Subject: [PATCH 1/4] Create dependabot.yml

---
 .github/dependabot.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..7e28898
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,20 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"

From 6379ea603e9d86561f4750fce81ccdc5becf21c0 Mon Sep 17 00:00:00 2001
From: Andrew <achapkowski@users.noreply.github.com>
Date: Tue, 25 Aug 2026 09:23:31 -0400
Subject: [PATCH 2/4] Update unit-tests.yml

---
 .github/workflows/unit-tests.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 12fd66d..a644af1 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -1,7 +1,6 @@
 name: Unit tests
 
 on:
-  push:
   pull_request:
 
 jobs:
@@ -51,4 +50,4 @@ jobs:
         run: python -m pip install -e .
 
       - name: Run unit tests
-        run: python -m unittest discover -s tests
\ No newline at end of file
+        run: python -m unittest discover -s tests

From 2fd4352317b4b791dfff667ae70e7d38b3fe14b9 Mon Sep 17 00:00:00 2001
From: Andrew <achapkowski@users.noreply.github.com>
Date: Tue, 25 Aug 2026 09:33:42 -0400
Subject: [PATCH 3/4] Update dependabot.yml

---
 .github/dependabot.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 7e28898..772f29e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,6 +3,7 @@
 # Please see the documentation for all configuration options:
 # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
 
+version: 2
 updates:
   - package-ecosystem: "pip"
     directory: "/"
@@ -12,9 +13,19 @@ updates:
     open-pull-requests-limit: 5
     labels:
       - "dependencies"
+    groups:
+      python-deps:
+        patterns:
+          - "*"
 
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "monday"
+    labels:
+      - "dependencies"
+    groups:
+      actions:
+        patterns:
+          - "*"

From 5b5cd904bfa65b409016841701a61016dde079db Mon Sep 17 00:00:00 2001
From: andrew <achapkowski@esri.com>
Date: Tue, 25 Aug 2026 09:46:04 -0400
Subject: [PATCH 4/4] adds dependbot support.

---
 .github/workflows/unit-tests.yml |  6 +++--
 requirements-dev.txt             | 38 ++++++++++++++++++++++++++++++++
 2 files changed, 42 insertions(+), 2 deletions(-)
 create mode 100644 requirements-dev.txt

diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index a644af1..682e21b 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -45,9 +45,11 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
-
+      - name: Install pinned dependencies
+        run: pip install -r requirements-dev.txt
+      
       - name: Install package
-        run: python -m pip install -e .
+        run: python -m pip install -e . --no-deps
 
       - name: Run unit tests
         run: python -m unittest discover -s tests
diff --git a/requirements-dev.txt b/requirements-dev.txt
new file mode 100644
index 0000000..8792607
--- /dev/null
+++ b/requirements-dev.txt
@@ -0,0 +1,38 @@
+# This file was autogenerated by uv via the following command:
+#    uv pip compile --universal -o requirements-dev.txt pyproject.toml
+anyio==4.14.2 ; sys_platform != 'emscripten'
+    # via httpx2
+cffi==2.1.1 ; platform_python_implementation != 'PyPy'
+    # via cryptography
+cryptography==50.0.0
+    # via
+    #   httpx2-kerberos (pyproject.toml)
+    #   pyspnego
+decorator==5.3.1 ; sys_platform != 'win32'
+    # via gssapi
+gssapi==1.11.1 ; sys_platform != 'win32'
+    # via pyspnego
+h11==0.16.0 ; sys_platform != 'emscripten'
+    # via httpcore2
+httpcore2==2.12.0 ; sys_platform != 'emscripten'
+    # via httpx2
+httpx2==2.12.0
+    # via httpx2-kerberos (pyproject.toml)
+httpx2-jsfetch==1.0 ; sys_platform == 'emscripten'
+    # via httpx2
+idna==3.19
+    # via
+    #   anyio
+    #   httpx2
+krb5==0.10.0 ; sys_platform != 'win32'
+    # via pyspnego
+pycparser==3.0 ; implementation_name != 'PyPy' and platform_python_implementation != 'PyPy'
+    # via cffi
+pyspnego==0.12.1
+    # via httpx2-kerberos (pyproject.toml)
+sspilib==0.6.0 ; sys_platform == 'win32'
+    # via pyspnego
+truststore==0.10.4 ; sys_platform != 'emscripten'
+    # via
+    #   httpcore2
+    #   httpx2