Align Dependabot coverage with the estate baseline - #304
Conversation
Bring `.github/dependabot.yml` to the estate baseline: one update stanza per package ecosystem the repository uses, each labelled `dependencies` plus its channel label, with GitHub Actions updates batched into a single pull request via a wildcard group.
|
Important Review skippedDraft detected. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
Reviewer's guide (collapsed on small PRs)Reviewer's GuideAligns the repository’s Dependabot configuration with the Rust estate baseline by ensuring each ecosystem has appropriate dependency/channel labels, specifically adding the missing File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
Summary
This branch applies Wave 1 of the Rust estate baseline remediation
(Operation Parabellum, phase 2). It aligns
.github/dependabot.yml
with the canonical Dependabot reference: one update stanza per package
ecosystem the repository uses (
cargo,uv,github-actions), each stanza labelleddependenciesplus its channel label, and GitHub Actions updates batchedinto a single pull request via a wildcard group.
Review walkthrough
.github/dependabot.yml
for the ecosystem coverage and labels.
Validation
dependabot-baselineandrust-dev-fast-baseline:dependabot-baselinecompliant,rust-dev-fast-baselineindeterminate.Notes
configuration references) were created on the repository ahead of this
pull request, so no stanza names a missing label.
Summary by Sourcery
Enhancements:
uvecosystem label to Python dependency updates in Dependabot configuration to match baseline labelling.