Skip to content

chore: add Dependabot config (replacing Renovate) - #431

Merged
mikerudd merged 2 commits into
mainfrom
chore/dependabot-config
Nov 10, 2026
Merged

mikerudd merged 2 commits into
mainfrom
chore/dependabot-config

Conversation

@stephenrob

Copy link
Copy Markdown
Contributor

Renovate is being retired across the talis org in favour of Dependabot. Dependabot alerts and security updates are already enabled org-wide through the GitHub code security configuration. This PR adds the standard .github/dependabot.yml for version updates.

Ecosystems detected: github-actions, npm

What it does

  • Weekly (Monday 06:00 London) version updates. Minor and patch updates come as one grouped PR per ecosystem, majors as a separate grouped PR.
  • Cooldown: new releases are skipped until they are 7 days old (30 days for majors), so short-lived malicious releases never get pulled in.
  • Security updates for each ecosystem are grouped into one PR.
  • Removes the Renovate config (renovate.json). The Renovate app has been suspended org-wide.

Please check the detected directories are right for this repo. Merging is up to the team.

🤖 Generated with Claude Code

stephenrob and others added 2 commits November 10, 2026 11:17
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@mikerudd
mikerudd merged commit 91a2735 into main Nov 10, 2026
6 checks passed
@mikerudd
mikerudd deleted the chore/dependabot-config branch November 10, 2026 15:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants