chore: add Dependabot config for npm + GitHub Actions (#33)

Adds .github/dependabot.yml covering the two npm packages (opendia-mcp, opendia-extension) and the GitHub Actions used in CI. Weekly schedule with minor/patch grouping to keep PR noise low; this also surfaces the checkout/setup-node major bumps the CI currently warns about.

Co-authored-by: aaronjmars <aaronjmars@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
@aaronjmars 2026-06-22 08:07:21 -04:00 committed by GitHub
parent cfbc3aa83b
commit d58a584e7e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

43
.github/dependabot.yml vendored Normal file
View file

@ -0,0 +1,43 @@
version: 2
updates:
# MCP server (Node.js)
- package-ecosystem: npm
directory: /opendia-mcp
schedule:
interval: weekly
open-pull-requests-limit: 5
commit-message:
prefix: chore(mcp-deps)
groups:
mcp-minor-and-patch:
update-types:
- minor
- patch
# Browser extension (Node.js)
- package-ecosystem: npm
directory: /opendia-extension
schedule:
interval: weekly
open-pull-requests-limit: 5
commit-message:
prefix: chore(ext-deps)
groups:
ext-minor-and-patch:
update-types:
- minor
- patch
# GitHub Actions used by the CI workflow
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
open-pull-requests-limit: 5
commit-message:
prefix: chore(ci-deps)
groups:
actions-minor-and-patch:
update-types:
- minor
- patch