strix/.github/dependabot.yml
Ahmed Allam a5b80af428 ci: split CI into per-concern reusable workflows behind one ci-passed gate
Add uv lock --check, a wheel install smoke test, a PyInstaller dry run,
actionlint and zizmor on the workflows, CodeQL, and Dependabot for action
pins, uv, Go and npm dependencies. Release caches are disabled so zizmor's
cache-poisoning audit passes.
2026-10-04 21:07:06 +03:00

49 lines
863 B
YAML

version: 2
updates:
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
cooldown:
default-days: 7
groups:
actions:
patterns:
- '*'
- package-ecosystem: uv
directory: /
schedule:
interval: weekly
cooldown:
default-days: 7
groups:
python:
update-types:
- minor
- patch
- package-ecosystem: gomod
directory: /strix/interface/tui
schedule:
interval: weekly
cooldown:
default-days: 7
groups:
go:
update-types:
- minor
- patch
- package-ecosystem: npm
directory: /strix/interface/viewer/frontend
schedule:
interval: weekly
cooldown:
default-days: 7
groups:
viewer:
update-types:
- minor
- patch