Files
edict/.github/dependabot.yml
cft0808 dc66e0666d chore: add community governance infrastructure
- CODEOWNERS: define code ownership for core paths (@cft0808)
- CODE_OF_CONDUCT.md: Contributor Covenant v2.1 (Chinese)
- SECURITY.md: vulnerability reporting policy
- CONTRIBUTING.md: add contributor ladder (Contributor→Triage→Committer→Maintainer)
- dependabot.yml: auto dependency updates (pip/npm/actions weekly)
- auto-label.yml + labeler.yml: PR auto-labeling by file path
- stale.yml: auto-close stale Issues (60d) and PRs (30d)
- Issue templates: add question.md, config.yml, needs-triage label
- Branch protection: require PR reviews, CI checks, code owner approval
2026-03-28 20:55:54 +08:00

44 lines
942 B
YAML

# Dependabot 自动依赖更新配置
# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates
version: 2
updates:
# Python (pip) 依赖
- package-ecosystem: "pip"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
labels:
- "dependencies"
- "P2-nice-to-have"
commit-message:
prefix: "chore(deps):"
open-pull-requests-limit: 5
# npm 依赖
- package-ecosystem: "npm"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
labels:
- "dependencies"
- "P2-nice-to-have"
commit-message:
prefix: "chore(deps):"
open-pull-requests-limit: 3
# GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
labels:
- "dependencies"
- "ci"
commit-message:
prefix: "ci(deps):"
open-pull-requests-limit: 5