Skip to content

ci: add dependabot config with increase-if-necessary versioning#2400

Open
josephfusco wants to merge 2 commits into
canaryfrom
ci/dependabot-config
Open

ci: add dependabot config with increase-if-necessary versioning#2400
josephfusco wants to merge 2 commits into
canaryfrom
ci/dependabot-config

Conversation

@josephfusco

Copy link
Copy Markdown
Member

Adds a Dependabot config with daily npm, composer, and github-actions update schedules, using versioning-strategy: increase-if-necessary so declared dependency ranges aren't rewritten when the new version still satisfies the existing range.

@changeset-bot

changeset-bot Bot commented Jun 15, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 2f8b25e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions

github-actions Bot commented Jun 15, 2026

Copy link
Copy Markdown
Contributor

📦 Next.js Bundle Analysis for @faustwp/getting-started-example

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a new Dependabot configuration for the faustjs monorepo to automate dependency update PRs across JavaScript, PHP, and GitHub Actions.

Changes:

  • Introduces .github/dependabot.yml with daily update schedules for npm, composer, and github-actions.
  • Applies versioning-strategy: increase-if-necessary to the npm updater to avoid rewriting declared ranges when not needed.
  • Sets per-ecosystem open PR limits to control update volume.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/dependabot.yml Outdated
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@josephfusco josephfusco marked this pull request as ready for review June 15, 2026 17:51
@josephfusco josephfusco requested a review from a team as a code owner June 15, 2026 17:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants