From 185322b1814774556cac0223c056e1e639fc2fd3 Mon Sep 17 00:00:00 2001 From: dkeeno Date: Wed, 24 Jun 2026 16:45:18 +0000 Subject: [PATCH] chore: reduce Dependabot cadence from weekly to monthly Weekly github-actions update PRs generated excessive notification noise for a low-churn ecosystem. Monthly still surfaces security-relevant bumps with ~4x less churn. --- .github/dependabot.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5ace460..4c4f2b7 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,6 +1,10 @@ +# Dependabot — automated dependency-update PRs. +# Cadence is monthly (not weekly): the github-actions ecosystem here changes +# slowly, and weekly runs produced excessive PR + notification noise. Monthly +# still surfaces security-relevant version bumps with ~4x less churn. version: 2 updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + interval: "monthly"