commit 4dbe1cc82123fc38af868c5d65e4fec1b626637c
parent 9870ba9c4ab2b3324227fea545421c1b71351c77
Author: Jack Mordaunt <jackmordaunt.dev@gmail.com>
Date: Fri, 18 Sep 2026 16:09:30 -0400
build: let dependabot watch every module
Only the root module was configured, so the command modules' dependencies
went unwatched; the x/image advisory in preview sat open because of it.
Grouping the golang.org/x updates keeps them to one pull request instead of
one per module.
Diffstat:
1 file changed, 10 insertions(+), 3 deletions(-)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,10 +1,17 @@
version: 2
updates:
- package-ecosystem: "gomod"
- directory: "/"
+ directories:
+ - "/"
+ - "/cmd/preview"
+ - "/cmd/shell-extension"
schedule:
- interval: "daily"
+ interval: "weekly"
+ groups:
+ golang-x:
+ patterns:
+ - "golang.org/x/*"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
- interval: "daily"
+ interval: "weekly"