add dependabot.yml

2026-01-26 10:04:28 -06:00 · 2026-01-26 10:04:28 -06:00 · 645161cc09
commit 645161cc09
parent 065e730200
1 changed files with 20 additions and 0 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -0,0 +1,20 @@
+version: 2
+updates:
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: monthly
+  groups:
+    minor-actions-dependencies:
+      # GitHub Actions: Only group minor and patch updates (we want to carefully review major updates)
+      update-types: [ minor, patch ]
+
+- package-ecosystem: maven
+  directory: /
+  schedule:
+    interval: monthly
+  groups:
+    minor-java-dependencies:
+      # Java: Only group minor and patch updates (we want to carefully review major updates)
+      update-types: [ minor, patch ]
+