From bdddef381d3717c2caf051fe798e099696fd5777 Mon Sep 17 00:00:00 2001 From: Blake Gentry Date: Thu, 22 Oct 2026 08:56:22 -0500 Subject: [PATCH] schedule combined dependency updates monthly Put all routine dependency updates on the shared monthly schedule to reduce review noise and repeated CI runs across ecosystems. Add Ruby and Java to the combined group. Discover Ruby projects recursively and use the Java reactor root to cover its modules. Retain seven-day cooldowns for Ruby and Java alongside Rust and JavaScript. --- .github/dependabot.yml | 19 +++++++++++++++++-- 1 file changed, 17 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 39deef6d1..cff587eff 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,12 +6,20 @@ version: 2 multi-ecosystem-groups: dependencies: schedule: - interval: "weekly" - day: "monday" + interval: "monthly" time: "09:00" timezone: "America/Chicago" updates: + - package-ecosystem: "bundler" + directories: + - "/ruby" + - "/ruby/**/*" + cooldown: + default-days: 7 + multi-ecosystem-group: "dependencies" + patterns: + - "*" - package-ecosystem: "cargo" directory: "/rust" cooldown: @@ -33,6 +41,13 @@ updates: multi-ecosystem-group: "dependencies" patterns: - "*" + - package-ecosystem: "maven" + directory: "/java" + cooldown: + default-days: 7 + multi-ecosystem-group: "dependencies" + patterns: + - "*" # Exact pins in package.json (Prisma, the TypeScript-next preview, pnpm # overrides) stay exact because `increase` rewrites the pinned version # rather than widening it.