Improve dependabot config with better docs and numpy ignore rule

• Add detailed PR strategy comments
• Ignore numpy major version updates
• Group dependency updates by category
• Document update types per ecosystem
• Enhance configuration readability
This commit is contained in:
yangdx 2025-12-02 11:12:32 +08:00
parent 445adfc9cb
commit 9425277fd9

View file

@ -3,8 +3,11 @@
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem
version: 2 version: 2
updates: updates:
# Enable version updates for GitHub Actions # ============================================================
# Workflow files stored in the default location of `.github/workflows` # GitHub Actions
# PR Strategy:
# - All updates (major/minor/patch): Grouped into a single PR
# ============================================================
- package-ecosystem: github-actions - package-ecosystem: github-actions
directory: / directory: /
groups: groups:
@ -18,7 +21,13 @@ updates:
- "github-actions" - "github-actions"
open-pull-requests-limit: 5 open-pull-requests-limit: 5
# Configuration for pip (Python dependencies) # ============================================================
# Python (pip) Dependencies
# PR Strategy:
# - Major updates: Individual PR per package (except numpy which is ignored)
# - Minor updates: Grouped by category (llm-providers, storage, etc.)
# - Patch updates: Grouped by category
# ============================================================
- package-ecosystem: "pip" - package-ecosystem: "pip"
directory: "/" directory: "/"
schedule: schedule:
@ -95,12 +104,22 @@ updates:
update-types: update-types:
- "minor" - "minor"
- "patch" - "patch"
ignore:
- dependency-name: "numpy"
update-types:
- "version-update:semver-major"
labels: labels:
- "dependencies" - "dependencies"
- "python" - "python"
open-pull-requests-limit: 10 open-pull-requests-limit: 10
# Configuration for bun (Frontend dependencies) # ============================================================
# Frontend (bun) Dependencies
# PR Strategy:
# - Major updates: Individual PR per package
# - Minor updates: Grouped by category (react, ui-components, etc.)
# - Patch updates: Grouped by category
# ============================================================
- package-ecosystem: "bun" - package-ecosystem: "bun"
directory: "/lightrag_webui" directory: "/lightrag_webui"
schedule: schedule: