3 commits

Author	SHA1	Message	Date
Yuan Tang	34093fecd1	ci: Remove open-pull-requests-limit: 0 from dependabot.yml (#2900) ... This might fix issues in https://github.com/meta-llama/llama-stack/pull/2899 and https://github.com/meta-llama/llama-stack/pull/2897 where uv dependencies are not being upgraded correctly (`uv.lock` is not being updated).	2025-07-25 09:49:18 +02:00
Yuan Tang	2d2bb701fa	ci: Add dependabot scans for Python deps (#1618) ... # What does this PR do? This PR adds dependabot updates for Python dependencies. In addition: * Consistent weekly schedule on a specific day * Specific commit messages * `open-pull-requests-limit` is intentional to avoid upgrading dependencies that will likely cause regressions. We want to keep the focus here on security updates only Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>	2025-03-17 20:20:31 -07:00
Sébastien Han	e6355bfc3b	ci: enable Dependabot for GitHub Actions (#1470) ... # What does this PR do? Add a Dependabot configuration file (.github/dependabot.yml) to enable automated dependency updates for GitHub Actions. This ensures workflows stay up to date with the latest versions, improving security and reliability. Dependabot is configured to: - Monitor GitHub Actions dependencies. - Check for updates in the workflow directory - Run updates on a daily schedule. Signed-off-by: Sébastien Han <seb@redhat.com>	2025-03-07 12:54:56 -08:00