Skip to content

chore: configure dependabot updates - #340

Merged
richardthe3rd merged 3 commits into
mainfrom
copilot/configure-dependabot-for-dart-dependencies
May 27, 2026
Merged

chore: configure dependabot updates#340
richardthe3rd merged 3 commits into
mainfrom
copilot/configure-dependabot-for-dart-dependencies

Conversation

Copilot AI commented May 27, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add Dependabot configuration for Dart/pub dependencies
  • add weekly grouped updates for GitHub Actions, npm package directories, and devcontainer dependencies
  • use semantic commit prefixes so Dependabot PRs satisfy PR title linting

Validation

  • ./bin/mise run check
  • parallel_validation

Copilot AI requested a review from richardthe3rd May 27, 2026 10:40
@richardthe3rd
richardthe3rd marked this pull request as ready for review May 27, 2026 11:04
Copilot AI review requested due to automatic review settings May 27, 2026 11:04

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a Dependabot configuration to automate dependency updates across the Flutter/Dart app and the repo’s supporting tooling (GitHub Actions, npm subprojects, and devcontainer). It also updates the mise lockfiles to include missing platform checksums/URLs, improving tool install reproducibility.

Changes:

  • Added .github/dependabot.yml with weekly, grouped updates for pub, GitHub Actions, multiple npm directories, and devcontainers, using semantic commit prefixes.
  • Updated mise.lock to include checksums for Node.js musl platform builds.
  • Expanded mise.dev.lock with platform-specific download URLs and checksums for watchexec.

Reviewed changes

Copilot reviewed 1 out of 3 changed files in this pull request and generated no comments.

File Description
mise.lock Adds missing musl checksums for pinned Node.js tool downloads to improve integrity verification.
mise.dev.lock Records platform-specific watchexec artifacts and checksums for reproducible dev-tool installs.
.github/dependabot.yml Introduces scheduled, grouped Dependabot updates across Dart, Actions, npm workspaces, and devcontainer dependencies.

@richardthe3rd
richardthe3rd merged commit ceb111f into main May 27, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants