Stop running Dependabot alongside Renovate

mirror of https://github.com/spantaleev/matrix-docker-ansible-deploy.git synced 2026-09-23 08:10:10 +00:00

Both were updating `github-actions` daily, so both proposed the same bumps.
actions/setup-python v7 arrived twice within an hour: Renovate as #5575, Dependabot
as #5576.

Renovate is the one to keep. It pins actions to digests via
`helpers:pinGitHubActionDigests`, so master carries
`actions/setup-python@5fda3b9... # v7`, while Dependabot proposes a bare `@v7` and
would undo that pinning. Renovate's bumps also merge on a branch once CI has run
them, whereas Dependabot's sit outside every automerge rule here and need a human
for each one.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SEH3vxYSQ5SV4N5z61eyGT

This commit is contained in:

Slavi Pantaleev

2026-08-27 22:10:56 +03:00

co-authored by

Claude Opus 5

parent 3d381ba790

commit f6ce120653

1 changed files with 0 additions and 11 deletions

									
										.github/dependabot.yaml
									
		-11
	
												View File
											
					@@ -1,11 +0,0 @@

					# SPDX-FileCopyrightText: 2022 Marko Weltzer

					#

					# SPDX-License-Identifier: AGPL-3.0-or-later

					---

					version: 2

					updates:

					  - package-ecosystem: "github-actions"

					    directory: "/"

					    schedule:

					      interval: daily