From 2960e8ecb5ea2e4083d4baf541ac0a281a7b5aec Mon Sep 17 00:00:00 2001 From: Jeremy Frasier Date: Mon, 13 Apr 2026 13:32:46 -0400 Subject: [PATCH 1/2] Add (commented out) Dependabot ignore directives for Python dependencies This is so that descendant repos can uncomment these for Python dependencies such as setuptools that are really inherited from the Lineage parent repo. --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index cd33b25..19ff2d3 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -44,6 +44,16 @@ updates: package-ecosystem: pip schedule: interval: weekly + # ignore: + # # Managed by cisagov/skeleton-python-library + # - dependency-name: build + # - dependency-name: coverage + # - dependency-name: coveralls + # - dependency-name: pre-commit + # - dependency-name: pytest-cov + # - dependency-name: pytest + # - dependency-name: setuptools + # - dependency-name: twine - directory: / package-ecosystem: terraform From 549259a828527e8d435cc2162dc1d8acd70c49f9 Mon Sep 17 00:00:00 2001 From: Jeremy Frasier Date: Mon, 13 Apr 2026 14:27:52 -0400 Subject: [PATCH 2/2] Alphabetize Co-authored-by: dav3r --- .github/dependabot.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 19ff2d3..0bedb40 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -41,9 +41,6 @@ updates: interval: weekly - directory: / - package-ecosystem: pip - schedule: - interval: weekly # ignore: # # Managed by cisagov/skeleton-python-library # - dependency-name: build @@ -54,6 +51,9 @@ updates: # - dependency-name: pytest # - dependency-name: setuptools # - dependency-name: twine + package-ecosystem: pip + schedule: + interval: weekly - directory: / package-ecosystem: terraform