Commit Graph
5 Commits
Author SHA1 Message Date
Josh HawkinsandGitHub 2cb03f442c Group dependabot updates (#24624)
CI / AMD64 Build (push) Canceled after 0s
CI / AMD64 Smoke Test (push) Canceled after 0s
CI / ARM Build (push) Canceled after 0s
CI / Jetson Jetpack 6 (push) Canceled after 0s
CI / AMD64 Extra Build (push) Canceled after 0s
CI / ARM Extra Build (push) Canceled after 0s
CI / Synaptics Build (push) Canceled after 0s
CI / Assemble and push default build (push) Canceled after 0s
* group dependabot updates and hold known-bad versions

Dependabot opened a separate PR for every bump, refilled the list with security PRs right after each merge, and kept proposing versions known to break Frigate.

- Group minor and patch updates and security updates into one PR per ecosystem, with separate groups for packages that only resolve together
- Move every version hold into ignore rules, each with its reason
- Switch to weekly updates with a 3-day cooldown
- Turn off version updates for docker/tensorrt, since no pull request check builds those images
- Drop target-branch, which kept these options from applying to security updates, and the docker entry, which never opened a PR
- Scan the setup composite action, and bump change-string-case, setup-qemu, setup-buildx and login-action

* group github actions security updates
2026-10-10 15:08:01 -05:00
Nicolas MowenandGitHub 4cf19458fe Only create docs dependabot PRs for docusaurus deps (#10593)
* Only create docs dependabot PRs for docusaurus deps

* Fix

* Update dependabot.yml
2024-03-22 20:39:30 -06:00
Nicolas MowenandGitHub 4c05ef48a7 Add dependabot to tensorrt python deps (#8455) 2023-11-05 14:29:06 -06:00
Nicolas MowenandGitHub 9185753322 Fix Python Dependabot (#7762) 2023-09-11 17:07:51 -05:00
herostratandGitHub 573fdae37f Configure Dependabot (#4271)
* Configure dependabot

* Set dependabot on dev branch
2022-11-07 06:10:08 -06:00