Skip to content

Commit edaa85f

Browse files
chore: Disable dependabot PRs to bump python deps (#714)
## Summary - Remove the `pip` ecosystem from `.github/dependabot.yml` so Dependabot no longer opens Python dependency update PRs - Keep weekly GitHub Actions version updates with the existing cooldown ## Test plan - [ ] Confirm Dependabot alerts still appear at `/security/dependabot` - [ ] Confirm no new `dependabot/pip` PRs are opened after the next weekly run - [ ] Confirm Actions group bump PRs continue as before <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Removed automated weekly update checks for Python dependencies. * Continued automated update checks for GitHub Actions dependencies. <!-- end of auto-generated comment: release notes by coderabbit.ai --> Signed-off-by: Kendrick Boyd <kendrickb@nvidia.com>
1 parent 1a550b0 commit edaa85f

1 file changed

Lines changed: 0 additions & 12 deletions

File tree

.github/dependabot.yml

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -3,18 +3,6 @@
33

44
version: 2
55
updates:
6-
- package-ecosystem: "pip"
7-
directory: "/"
8-
schedule:
9-
interval: "weekly"
10-
open-pull-requests-limit: 5
11-
commit-message:
12-
prefix: "chore(deps)"
13-
# constraints.txt is generated from [tool.uv] constraint-dependencies in pyproject.toml
14-
# via tools/patch_dependabot.py; do not update it independently.
15-
exclude-paths:
16-
- "constraints.txt"
17-
186
- package-ecosystem: "github-actions"
197
directory: "/"
208
schedule:

0 commit comments

Comments
 (0)