From 6b7a156a7ea91687c85646f241123c1b8b4da43a Mon Sep 17 00:00:00 2001 From: Sebastian Mendel Date: Thu, 10 Sep 2026 13:17:25 +0200 Subject: [PATCH] chore(dependabot): remove the Dependabot configuration Renovate is the dependency-update tool for this organization, and it is live in this repository -- Dependency Dashboard #16. Dependabot duplicated it here: both bots opened a pull request for the same update, and whichever merged first left the other to be closed. The removed file declared: composer,github-actions Renovate currently detects: .pre-commit-config.yaml,composer,composer.json,github-actions,npm,package.json,pre-commit So nothing loses coverage. Renovate also carries the policy the Dependabot block never had: stability days, the automerge rules and the deps-no-automerge label all come from github>netresearch/renovate-config. Dependabot SECURITY updates are unaffected. Those are a repository setting, not this file, and they stay on. Assisted-by: claude-code:claude-opus-5 Agent-Session: https://claude.ai/code/session_01AXRGd6GWAC7TLK3wuiYeGg Agent-Host: 0493f0 Signed-off-by: Sebastian Mendel --- .github/dependabot.yml | 52 ------------------------------------------ 1 file changed, 52 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 2d559bb..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,52 +0,0 @@ -# Managed by netresearch/.github/templates/skill/ -# -# Declares only the ecosystems every skill consumer is guaranteed to have: -# github-actions (CI workflows) and composer (every skill repo ships a -# composer.json for split-licensing / Packagist distribution). -# -# npm and devcontainers are OPT-IN: a repo that actually has package.json -# fixtures (e.g. skills//references/examples/**) or a devcontainer adds -# the block below to its own dependabot.yml and lists `.github/dependabot.yml` -# under `intentional-drift:` in .github/template.yaml so the template sync -# stops managing the file. Declaring an ecosystem without its manifest makes -# the Dependabot run fail with `dependency_file_not_found`. -# -# Opt-in npm (use Dependabot's plural `directories:` to consolidate multiple -# fixture dirs into one grouped PR): -# - package-ecosystem: npm -# directories: -# - /skills//references/examples/ -# schedule: -# interval: weekly -# day: monday -# open-pull-requests-limit: 5 -# groups: -# npm: -# patterns: ['*'] -# cooldown: -# default-days: 7 -version: 2 -updates: - - package-ecosystem: github-actions - directory: / - schedule: - interval: weekly - day: monday - open-pull-requests-limit: 5 - groups: - github-actions: - patterns: ['*'] - cooldown: - default-days: 7 - - - package-ecosystem: composer - directory: / - schedule: - interval: weekly - day: monday - open-pull-requests-limit: 5 - groups: - composer: - patterns: ['*'] - cooldown: - default-days: 7