Skip to content

ci: add npm to dependabot config#207

Merged
robertodauria merged 2 commits intom-lab:mainfrom
sammy200-ui:add-npm-dependabot
Mar 4, 2026
Merged

ci: add npm to dependabot config#207
robertodauria merged 2 commits intom-lab:mainfrom
sammy200-ui:add-npm-dependabot

Conversation

@sammy200-ui
Copy link
Copy Markdown
Contributor

@sammy200-ui sammy200-ui commented Mar 2, 2026

now we also have npm dependencies with github actions as well !!

fixes #200

Copilot AI review requested due to automatic review settings March 2, 2026 15:36
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds npm dependency update checks to the existing Dependabot configuration so the repository’s Node.js dependencies receive automated weekly update PRs alongside GitHub Actions updates.

Changes:

  • Extend .github/dependabot.yml to include the npm ecosystem.
  • Configure npm updates to run weekly for the root directory (/).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@robertodauria
Copy link
Copy Markdown
Contributor

Please align the configuration with what we use on other JS repositories - for example: https://github.com/m-lab/ndt7-js/blob/main/.github/dependabot.yml

@sammy200-ui
Copy link
Copy Markdown
Contributor Author

done with the changes , also changed the old github action to match the example you gave !!

@bassosimone bassosimone changed the title add npm to dependabot config ci: add npm to dependabot config Mar 4, 2026
@bassosimone
Copy link
Copy Markdown
Collaborator

@sammy200-ui FYI we use conventional commits (https://www.conventionalcommits.org/en/v1.0.0/). I edited your pull request title to match this was of expressing commits. I suggest you take a look.

Copy link
Copy Markdown
Contributor

@robertodauria robertodauria left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thanks.

@robertodauria robertodauria merged commit efddff4 into m-lab:main Mar 4, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

updating Dependabot monitoring

4 participants