From 6b0a09b1f74b3a7dfc9f25fd22b3c2bb9b9d79d8 Mon Sep 17 00:00:00 2001
From: 0verwrite <31691645+overwrite00@users.noreply.github.com>
Date: Wed, 23 Sep 2026 11:19:56 +0200
Subject: [PATCH] chore(deps): switch Dependabot version updates to monthly
 schedule (#123)

Version updates (minor/patch/major bumps) now open once a month instead
of weekly. Dependabot security updates are unaffected by this schedule
and continue to open automatically in near real-time.
---
 .github/dependabot.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index fac21a7..9d4d8f2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,12 +1,14 @@
 version: 2
+# NOTE: `schedule` below only governs routine version updates (minor/patch/major bumps).
+# Dependabot security updates (triggered by GitHub Security Advisories) are independent
+# of this schedule and are opened automatically in near real-time regardless of interval.
 updates:
   # Python dependencies via pip
   - package-ecosystem: "pip"
     directory: "/"
     target-branch: "develop"
     schedule:
-      interval: "weekly"
-      day: "monday"
+      interval: "monthly"
       time: "04:00"
     open-pull-requests-limit: 5
     labels:
@@ -44,8 +46,7 @@ updates:
     directory: "/"
     target-branch: "develop"
     schedule:
-      interval: "weekly"
-      day: "monday"
+      interval: "monthly"
       time: "04:00"
     labels:
       - "dependencies"