Skip to content

Update dependabot directory path for package manifests - #1

Closed
Mpurushotham wants to merge 1 commit into
mainfrom
Mpurushotham-patch-1
Closed

Update dependabot directory path for package manifests#1
Mpurushotham wants to merge 1 commit into
mainfrom
Mpurushotham-patch-1

Conversation

@Mpurushotham

Copy link
Copy Markdown
Owner

No description provided.

@Mpurushotham

Copy link
Copy Markdown
Owner Author

Superseded by #3, which includes .github/dependabot.yml with the directory paths this PR fixes, plus grouping, labels, and a 7-day cooldown (14 for majors) so an automated bump cannot be the delivery route for a package compromised and yanked within days of publication.

Closing in favour of that. Nothing from this PR is lost.

@Mpurushotham
Mpurushotham deleted the Mpurushotham-patch-1 branch July 30, 2026 06:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant