Add pip ecosystem to dependabot#34
Conversation
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request adds a pip package ecosystem to the Dependabot configuration and reduces the dependabot-cooldown period in the zizmor linter settings. A review comment correctly points out that Dependabot's pip ecosystem does not support extracting dependencies from GitHub Actions workflow files, suggesting a change to the root directory for proper dependency tracking.
There was a problem hiding this comment.
Pull request overview
Adds Dependabot support for Python (pip) dependencies used by GitHub workflow automation, and aligns the zizmor dependabot cooldown rule with the configured cooldown.
Changes:
- Add a
pipecosystem entry to Dependabot targeting.github/workflows. - Reduce the zizmor
dependabot-cooldownrule from 14 to 7 days.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| .github/linters/zizmor.yml | Adjusts the configured minimum cooldown window for Dependabot-related checks. |
| .github/dependabot.yml | Adds a new Dependabot update configuration for pip dependencies in workflow automation. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
No description provided.