Skip to content

ci: use daily repository-owned Dependabot updates - #9

Merged
coela-oss merged 1 commit into
mainfrom
chore/dependabot-daily-20261016
Oct 16, 2026
Merged

coela-oss merged 1 commit into
mainfrom
chore/dependabot-daily-20261016

Conversation

@coela-oss

Copy link
Copy Markdown
Member

Move dependency observation to repository-owned Dependabot, as approved by the owner. Change the existing weekly schedule to daily weekday checks and align the dependency policy. Existing groups, ignore rules, PR limits, time/timezone and toolchain choices remain unchanged.

Only .github/dependabot.yml and docs/dependency-updates.md change. No automatic merge, registry publication, tag creation, production deployment, secrets or permission changes are introduced. Package/build/release validation remains with this repository; the private coela-release ledger will not run it.

The exact candidate and parent source were approved in the documentation-only rollout manifest. YAML structure was compared against the previous configuration; owner CI and native protections remain in force.

@coela-oss
coela-oss merged commit 78473e3 into main Oct 16, 2026
2 checks passed
@coela-oss
coela-oss deleted the chore/dependabot-daily-20261016 branch October 16, 2026 03:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant