Skip to content

Batch monthly updates for GitHub Actions and Maven dependencies#572

Merged
brunoborges merged 1 commit into
microsoft:mainfrom
johnoliver:dependabot-monthly-used-ecosystems
Jul 14, 2026
Merged

Batch monthly updates for GitHub Actions and Maven dependencies#572
brunoborges merged 1 commit into
microsoft:mainfrom
johnoliver:dependabot-monthly-used-ecosystems

Conversation

@johnoliver

Copy link
Copy Markdown
Member

This pull request updates the .github/dependabot.yml configuration to improve dependency management by switching to monthly update intervals, grouping updates into batches, and adding Maven support.

Dependabot configuration improvements:

  • Changed the update interval for GitHub Actions dependencies from daily to monthly and grouped updates into a single monthly batch.
  • Added configuration to manage Maven dependencies with monthly update scheduling and batch grouping.

@sonarqubecloud

sonarqubecloud Bot commented Jul 9, 2026

Copy link
Copy Markdown

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request adjusts Dependabot configuration to reduce update noise by moving GitHub Actions updates to a monthly cadence with batching, and extends Dependabot coverage to include Maven dependencies on the same schedule.

Changes:

  • Switched github-actions Dependabot updates from daily to monthly and grouped them into a single batch.
  • Added a new maven Dependabot update configuration with monthly scheduling and batching.

@brunoborges
brunoborges merged commit 2daacd6 into microsoft:main Jul 14, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants