https://github.com/python/cpython/commit/1407bb9ebc675619cb479415c573508ca773ef2f commit: 1407bb9ebc675619cb479415c573508ca773ef2f branch: main author: Hugo van Kemenade <[email protected]> committer: hugovk <[email protected]> date: 2026-09-29T11:23:24+03:00 summary:
Run Dependabot independently on each branch (#158361) Co-authored-by: Ezio Melotti <[email protected]> files: M .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml index dca3e12ec18270..5f9e3c323e30b8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,12 +16,128 @@ updates: # Cooldowns protect against supply chain attacks by avoiding the # highest-risk window immediately after new releases. default-days: 14 + - package-ecosystem: "pip" directory: "/Tools/" schedule: interval: "quarterly" - labels: - - "skip issue" - - "skip news" + labels: ["skip issue", "skip news"] + groups: + pip: + patterns: ["*"] + cooldown: + default-days: 14 + + # Release branches: Dependabot only reads this file from the default + # branch, so each branch that should get its own actions bumps needs an + # entry here with `target-branch`. Add one when a new release branch is + # created, and remove when the branch reaches end-of-life. + - package-ecosystem: "github-actions" + target-branch: "3.15" + directory: "/" + schedule: + interval: "quarterly" + labels: ["skip issue", "skip news"] + groups: + actions: + patterns: ["*"] + cooldown: + default-days: 14 + + - package-ecosystem: "github-actions" + target-branch: "3.14" + directory: "/" + schedule: + interval: "quarterly" + labels: ["skip issue", "skip news"] + groups: + actions: + patterns: ["*"] + cooldown: + default-days: 14 + + - package-ecosystem: "github-actions" + target-branch: "3.13" + directory: "/" + schedule: + interval: "quarterly" + labels: ["skip issue", "skip news"] + groups: + actions: + patterns: ["*"] + cooldown: + default-days: 14 + + - package-ecosystem: "github-actions" + target-branch: "3.12" + directory: "/" + schedule: + interval: "quarterly" + labels: ["skip issue", "skip news"] + groups: + actions: + patterns: ["*"] + cooldown: + default-days: 14 + + - package-ecosystem: "github-actions" + target-branch: "3.11" + directory: "/" + schedule: + interval: "quarterly" + labels: ["skip issue", "skip news"] + groups: + actions: + patterns: ["*"] + cooldown: + default-days: 14 + + - package-ecosystem: "github-actions" + target-branch: "3.10" + directory: "/" + schedule: + interval: "quarterly" + labels: ["skip issue", "skip news"] + groups: + actions: + patterns: ["*"] + cooldown: + default-days: 14 + + # Only bump bugfix branches for pip. Remove + # the entry when branch goes security-only. + - package-ecosystem: "pip" + target-branch: "3.15" + directory: "/Tools/" + schedule: + interval: "quarterly" + labels: ["skip issue", "skip news"] + groups: + pip: + patterns: ["*"] + cooldown: + default-days: 14 + + - package-ecosystem: "pip" + target-branch: "3.14" + directory: "/Tools/" + schedule: + interval: "quarterly" + labels: ["skip issue", "skip news"] + groups: + pip: + patterns: ["*"] + cooldown: + default-days: 14 + + - package-ecosystem: "pip" + target-branch: "3.13" + directory: "/Tools/" + schedule: + interval: "quarterly" + labels: ["skip issue", "skip news"] + groups: + pip: + patterns: ["*"] cooldown: default-days: 14 _______________________________________________ Python-checkins mailing list -- [email protected] To unsubscribe send an email to [email protected] https://mail.python.org/mailman3//lists/python-checkins.python.org Member address: [email protected]
