diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 7ff2664..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,82 +0,0 @@ -# SPDX-License-Identifier: MIT -# Copyright (c) 2026 Nexus Engine contributors -# -# Dependabot config — weekly dep update sweeps across Rust, scripts/, and -# GitHub Actions. Minor + patch bumps group into one PR per ecosystem; -# majors land as separate PRs for review. -# -# Spec refs: -# - docs/architecture/01-principles.md (Law 4: always compiles, Law 7: MIT-only) -# - deny.toml (license + ban gates run in ci.yml) - -version: 2 - -updates: - # ─── Rust workspace ─────────────────────────────────────────────────────── - - package-ecosystem: cargo - directory: "/" - schedule: - interval: weekly - day: monday - time: "06:00" - timezone: Etc/UTC - open-pull-requests-limit: 5 - commit-message: - prefix: "deps" - include: scope - labels: - - dependencies - - automated - - area/ci - groups: - cargo-minor-and-patch: - applies-to: version-updates - update-types: - - minor - - patch - - # ─── scripts/ (Bun + npm registry) ──────────────────────────────────────── - - package-ecosystem: npm - directory: "/scripts" - schedule: - interval: weekly - day: monday - time: "06:00" - timezone: Etc/UTC - open-pull-requests-limit: 5 - commit-message: - prefix: "deps" - include: scope - labels: - - dependencies - - automated - - area/scripts - groups: - npm-minor-and-patch: - applies-to: version-updates - update-types: - - minor - - patch - - # ─── GitHub Actions ─────────────────────────────────────────────────────── - - package-ecosystem: github-actions - directory: "/" - schedule: - interval: weekly - day: monday - time: "06:00" - timezone: Etc/UTC - open-pull-requests-limit: 5 - commit-message: - prefix: "deps" - include: scope - labels: - - dependencies - - automated - - area/ci - groups: - actions-all: - applies-to: version-updates - update-types: - - minor - - patch