ci(github): configure dependabot automation#46
Conversation
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 20f8599f1d
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| run: | | ||
| pip install mkdocs-material | ||
| pip install mkdocs-minify-plugin | ||
| run: uv sync --locked |
There was a problem hiding this comment.
Because this change removes requirements.txt and makes the CI path install docs dependencies with uv, the local documentation instructions are now stale: docs/contributing.md:296 still tells contributors to run pip install -r requirements.txt, which fails on a fresh checkout because that file no longer exists. Please update the contributor instructions to use the new uv sync / uv run mkdocs ... flow, or keep a requirements file for the documented command.
Useful? React with 👍 / 👎.
1 participant
Summary
Updates this repo's Dependabot and dependency automation to match the newer LayeredCraft pattern. This adds grouped NuGet updates, GitHub Actions and uv ecosystem checks, plus automatic approval/auto-merge for safe Dependabot patch and minor updates.
Changes
.github/dependabot.ymlwith cooldowns, conventional commit metadata, infrastructure multi-ecosystem grouping, separate NuGet minor/patch vs. major groups, GitHub Actions updates, and uv updates..github/workflows/dependabot-auto-merge.ymlto auto-approve and enable squash auto-merge for Dependabot semver patch/minor PRs only.requirements.txttopyproject.toml/uv.lockso Dependabot can manage the docs dependency graph through theuvecosystem..github/workflows/docs.ymlto install dependencies withuv sync --lockedand build withuv run mkdocs build --clean.Microsoft.Extensions.DependencyInjectiontest package versions to bounded ranges by target framework.LayeredCraft.DecoWeaver.slnx.Validation
uv sync --lockedsuccessfully.uv run mkdocs build --cleansuccessfully; existing docs warnings remain for missing linked pages.dotnet restore LayeredCraft.DecoWeaver.slnxsuccessfully.dotnet build LayeredCraft.DecoWeaver.slnx --no-restoresuccessfully.