Skip to content

Add Dependabot configuration for automated dependency updates#38

Merged
franz1981 merged 2 commits intomasterfrom
copilot/add-dependabot-support
Nov 19, 2025
Merged

Add Dependabot configuration for automated dependency updates#38
franz1981 merged 2 commits intomasterfrom
copilot/add-dependabot-support

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Nov 18, 2025

Enables automated dependency updates for Maven dependencies (Netty, JUnit, JMH, plugins) and GitHub Actions.

Changes

  • .github/dependabot.yml: Configures weekly checks on Mondays at 09:00
    • Maven ecosystem: monitors all pom.xml files, groups minor/patch updates, max 10 concurrent PRs
    • GitHub Actions ecosystem: monitors workflow dependencies, max 5 concurrent PRs
    • PRs auto-labeled (dependencies, maven/github-actions) and assigned to @franz1981
    • Commit prefixes: deps: for Maven, ci: for Actions

Dependabot will now automatically open PRs when updates are available for Netty and other dependencies.

Original prompt

This section details on the original issue you should resolve

<issue_title>Add dependabot support</issue_title>
<issue_description>I would like dependabot to be able to open PRs to update to their latest versions plugins and dependencies (e.g. Netty)</issue_description>

Comments on the Issue (you are @copilot in this section)


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Co-authored-by: franz1981 <13125299+franz1981@users.noreply.github.com>
Copilot AI changed the title [WIP] Add dependabot support for plugin and dependency updates Add Dependabot configuration for automated dependency updates Nov 18, 2025
Copilot AI requested a review from franz1981 November 18, 2025 15:30
@franz1981
Copy link
Copy Markdown
Owner

why it's still WIP @copilot ?

Copy link
Copy Markdown
Contributor Author

Copilot AI commented Nov 19, 2025

why it's still WIP @copilot ?

The work is complete! The Dependabot configuration has been fully implemented in commit c6d3de8. The PR is ready for review and merge - it's no longer WIP. The configuration will start monitoring Maven dependencies (Netty, JUnit, JMH, plugins) and GitHub Actions once merged.

@franz1981 franz1981 marked this pull request as ready for review November 19, 2025 07:00
@franz1981 franz1981 merged commit 98ae75d into master Nov 19, 2025
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add dependabot support

2 participants