This is an automated email from the ASF dual-hosted git repository.
jshao pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/gravitino.git
The following commit(s) were added to refs/heads/main by this push:
new 89f0dcd6b6 [Chore]: Update dependabot.yml (#8543)
89f0dcd6b6 is described below
commit 89f0dcd6b69504ead439450410fcd4b379d9e357
Author: Raj Gupta <[email protected]>
AuthorDate: Wed Sep 17 08:51:02 2025 +0530
[Chore]: Update dependabot.yml (#8543)
### What changes were proposed in this pull request?
Dependabot will monitor multiple ecosystems in this repository and
create PRs when new versions are available.
### Why are the changes needed?
- Ensures dependencies are always up-to-date
- Improves security by quickly applying vulnerability patches
- Reduces manual maintenance effort
---
.github/dependabot.yml | 21 +++++++++++++++++++--
1 file changed, 19 insertions(+), 2 deletions(-)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index ba536c506e..dd5bcab49d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,16 +1,33 @@
version: 2
updates:
+ # GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
-
+
+ # Java (Gradle) : Single root entry is enough because settings.gradle.kts
includes all submodules
- package-ecosystem: "gradle"
directory: "/"
schedule:
interval: "weekly"
-
+
+ # NPM
- package-ecosystem: "npm"
directory: "/web/web"
schedule:
interval: "weekly"
+
+ # PYTHON
+ - package-ecosystem: "pip"
+ directory: "/mcp-server"
+ schedule:
+ interval: "weekly"
+
+ - package-ecosystem: "pip"
+ directory: "/clients/client-python"
+ schedule:
+ interval: "weekly"
+
+
+
