From 8ab65f36db7cce15d8b498e319433513f65f1fd8 Mon Sep 17 00:00:00 2001 From: Anton Volkov Date: Wed, 1 Jul 2026 13:41:35 +0200 Subject: [PATCH 1/4] Extend dependabot configuration to include pip and conda package managers --- .github/dependabot.yml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7863596214bf..796c390b5e57 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,3 +6,19 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + + # Note: only "==" pins are bumped; ">=" floors and dev pre-releases are not + - package-ecosystem: "pip" + directory: "/environments" + schedule: + interval: "weekly" + day: "saturday" + rebase-strategy: "disabled" + + # Handles plain conda-forge "pkg=X.Y.Z" pins and pip: sections + - package-ecosystem: "conda" + directory: "/environments" + schedule: + interval: "weekly" + day: "saturday" + rebase-strategy: "disabled" From f8219cd148af3e89535a9efd95415ff0ecd43a90 Mon Sep 17 00:00:00 2001 From: Anton Volkov Date: Wed, 1 Jul 2026 14:00:23 +0200 Subject: [PATCH 2/4] Add pre-commit package manager --- .github/dependabot.yml | 7 +++ .github/workflows/pre-commit-autoupdate.yml | 50 --------------------- 2 files changed, 7 insertions(+), 50 deletions(-) delete mode 100644 .github/workflows/pre-commit-autoupdate.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 796c390b5e57..59c196546f57 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -22,3 +22,10 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + + - package-ecosystem: "pre-commit" + directory: "/" + schedule: + interval: "weekly" + day: "saturday" + rebase-strategy: "disabled" diff --git a/.github/workflows/pre-commit-autoupdate.yml b/.github/workflows/pre-commit-autoupdate.yml deleted file mode 100644 index b84c3fc2f618..000000000000 --- a/.github/workflows/pre-commit-autoupdate.yml +++ /dev/null @@ -1,50 +0,0 @@ -name: Autoupdate pre-commit - -on: - # To be able to be triggered manually - workflow_dispatch: - # To guarantee Maintained check is occasionally updated. See - # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained - schedule: - - cron: '28 2 * * 6' # Saturday at 02:28 UTC - -permissions: read-all - -jobs: - autoupdate: - name: Autoupdate - - runs-on: ubuntu-latest - timeout-minutes: 10 - - permissions: - # Needed to create a PR with autoupdate changes - contents: write - pull-requests: write - - steps: - - name: Checkout DPNP repo - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - - name: Set up python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 - with: - python-version: '3.14' - - - name: Install pre-commit - run: pip install pre-commit - - - name: Run pre-commit autoupdate - run: pre-commit autoupdate - - - name: Create a PR with autoupdate changes - uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 #v8.1.1 - with: - commit-message: 'chore: update pre-commit hooks' - add-paths: .pre-commit-config.yaml - branch: 'bot/pre-commit-autoupdate' - delete-branch: true - title: Weekly pre-commit autoupdate - body: | - This PR updates the `.pre-commit-config.yaml` using `pre-commit autoupdate`. - labels: autoupdate From 0329363b591467687292a42210af28d063d6465f Mon Sep 17 00:00:00 2001 From: Anton Volkov Date: Wed, 1 Jul 2026 14:55:34 +0200 Subject: [PATCH 3/4] Add groups block per each ecosystem to have a single weekly PR per each ecosystem --- .github/dependabot.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 59c196546f57..90c4e2ed2405 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,6 +6,9 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + groups: + github-actions: + patterns: ["*"] # Note: only "==" pins are bumped; ">=" floors and dev pre-releases are not - package-ecosystem: "pip" @@ -14,6 +17,9 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + groups: + pip: + patterns: ["*"] # Handles plain conda-forge "pkg=X.Y.Z" pins and pip: sections - package-ecosystem: "conda" @@ -22,6 +28,9 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + groups: + conda: + patterns: ["*"] - package-ecosystem: "pre-commit" directory: "/" @@ -29,3 +38,6 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + groups: + pre-commit: + patterns: ["*"] From b08e95dcf85e8484fb4f16d00bf23816218a442b Mon Sep 17 00:00:00 2001 From: Anton Volkov Date: Wed, 1 Jul 2026 14:57:03 +0200 Subject: [PATCH 4/4] Add autoupdate label --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 90c4e2ed2405..233d0620ded1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,6 +6,7 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + labels: ["autoupdate"] groups: github-actions: patterns: ["*"] @@ -17,6 +18,7 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + labels: ["autoupdate"] groups: pip: patterns: ["*"] @@ -28,6 +30,7 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + labels: ["autoupdate"] groups: conda: patterns: ["*"] @@ -38,6 +41,7 @@ updates: interval: "weekly" day: "saturday" rebase-strategy: "disabled" + labels: ["autoupdate"] groups: pre-commit: patterns: ["*"]