mirror of
https://github.com/usestrix/strix.git
synced 2026-09-30 01:52:18 +00:00
8c8c524036
Adds .github/dependabot.yml so uv dependencies and GitHub Actions stay current automatically, complementing the existing pre-commit.ci hook autoupdates. uv updates are ungrouped (per-package, capped at 5/week) so each can be reviewed and CI-tested on its own; Actions are grouped into one weekly PR. A short 7-day cooldown lets new releases age before a PR opens, with cryptography excluded so security fixes aren't delayed. Dependabot is also told to respect the deliberate version caps in pyproject.toml -- cryptography <49 (#859), openai <2.45 (#748), and the openai-agents ==0.14.6 migration pin -- so it doesn't open bumps past them that would only fail CI or be closed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| dependabot.yml | ||
| logo.png | ||
| screenshot.png | ||
