Skip to content
This repository was archived by the owner on Jul 21, 2025. It is now read-only.

Add Dependabot config #209

Open
blockiosaurus wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add Dependabot config #209

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
version: 2
updates:
# We use pnpm for package management.
- package-ecosystem: 'npm'
# We only have a package.json in the root.
directory: '/'
# Check weekly to prevent too many PRs.
schedule:
interval: 'weekly'
Comment on lines +8 to +9
Copy link

@coderabbitai coderabbitai bot Jul 20, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue

Add required day field to weekly schedule to avoid Dependabot validation errors

Dependabot’s schema requires a day key when interval is set to weekly.
Without it, the configuration will be rejected and no update PRs will be created.

     schedule:
       interval: 'weekly'
+      day: 'monday'   # or any other valid weekday
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
schedule:
interval: 'weekly'
schedule:
interval: 'weekly'
day: 'monday' # or any other valid weekday
🤖 Prompt for AI Agents 
In .github/dependabot.yml at lines 8 to 9, the weekly schedule configuration is
missing the required 'day' field, causing Dependabot validation errors. Add a
'day' key with a valid weekday value (e.g., 'monday') alongside the 'interval'
key to comply with Dependabot's schema and ensure update PRs are created.

allow:
# Starting slow by only checking our own packages for updates.
- dependency-name: '@metaplex-foundation/*'
Copy link

@coderabbitai coderabbitai bot Jul 20, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick (assertive)

Add trailing newline to satisfy YAML-lint and POSIX tools

A missing newline at EOF is flagged by YAML-lint and can cause minor tooling annoyances.

-      - dependency-name: '@metaplex-foundation/*'
+      - dependency-name: '@metaplex-foundation/*'
+
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- dependency-name: '@metaplex-foundation/*'
- dependency-name: '@metaplex-foundation/*'
🧰 Tools
🪛 YAMLlint (1.37.1)

[error] 12-12: no new line character at the end of file

(new-line-at-end-of-file)

🤖 Prompt for AI Agents 
In .github/dependabot.yml at line 12, add a trailing newline character at the
end of the file to satisfy YAML-lint and POSIX tool requirements, ensuring
proper file formatting and avoiding linting errors.

Loading