Skip to content

Commit 64c40c4

Browse files
authored
Remove "uv" ecosystem from yaml (#681)
## Summary dependabot is now suggesting all possible package upgrades, when we really only want automated security updates: we'll decide when to update versions via a separate process not just based on "availability". ## Details It appears there's no entirely clear/reliable way to do that except from the GitHub advanced security UI, and it appears that defining the `github-actions` ecosystem behavior in the yaml file won't affect the existing UI configuration for other ecosystems; so try just removing the `uv` ecosystem configuration... ## Test Plan Merge and wait ... ## Related Issues --- - [x] "I certify that all code in this PR is my own, except as noted below." ## Use of AI - [ ] Includes AI-assisted code completion - [ ] Includes code generated by an AI application - [ ] Includes AI-generated tests (NOTE: AI written tests should have a docstring that includes `## WRITTEN BY AI ##`)
2 parents 095958a + 1f8672d commit 64c40c4

File tree

1 file changed

+0
-10
lines changed

1 file changed

+0
-10
lines changed

.github/dependabot.yml

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -10,13 +10,3 @@ updates:
1010
labels:
1111
- "dependencies"
1212
- "build"
13-
- package-ecosystem: "uv"
14-
directory: "/"
15-
schedule:
16-
interval: "weekly"
17-
open-pull-requests-limit: 10
18-
commit-message:
19-
prefix: "[UV]"
20-
labels:
21-
- "dependencies"
22-
- "python:uv"

0 commit comments

Comments
 (0)