| # Keep GitHub Actions up to date with GitHub's Dependabot... | |
| # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot | |
| # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem | |
| version: 2 | |
| updates: | |
| # ============================================================ | |
| # GitHub Actions | |
| # PR Strategy: | |
| # - All updates (major/minor/patch): Grouped into a single PR | |
| # ============================================================ | |
| - package-ecosystem: github-actions | |
| directory: / | |
| groups: | |
| github-actions: | |
| patterns: | |
| - "*" # Group all Actions updates into a single larger pull request | |
| schedule: | |
| interval: weekly | |
| day: monday | |
| time: "02:00" | |
| timezone: "Asia/Shanghai" | |
| labels: | |
| - "dependencies" | |
| - "github-actions" | |
| open-pull-requests-limit: 2 | |
| # ============================================================ | |
| # Python (pip) Dependencies | |
| # PR Strategy: | |
| # - Major updates: Individual PR per package (except numpy which is ignored) | |
| # - Minor updates: Grouped by category (llm-providers, storage, etc.) | |
| # - Patch updates: Grouped by category | |
| # ============================================================ | |
| - package-ecosystem: "pip" | |
| directory: "/" | |
| schedule: | |
| interval: "weekly" | |
| day: "wednesday" | |
| time: "02:00" | |
| timezone: "Asia/Shanghai" | |
| cooldown: | |
| default-days: 5 | |
| semver-major-days: 30 | |
| semver-minor-days: 7 | |
| semver-patch-days: 3 | |
| groups: | |
| # Core dependencies - LLM providers and embeddings | |
| llm-providers: | |
| patterns: | |
| - "openai" | |
| - "anthropic" | |
| - "google-*" | |
| - "boto3" | |
| - "botocore" | |
| - "ollama" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # Storage backends | |
| storage: | |
| patterns: | |
| - "neo4j" | |
| - "pymongo" | |
| - "redis" | |
| - "psycopg*" | |
| - "asyncpg" | |
| - "milvus*" | |
| - "qdrant*" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # Data processing and ML | |
| data-processing: | |
| patterns: | |
| - "numpy" | |
| - "scipy" | |
| - "pandas" | |
| - "tiktoken" | |
| - "transformers" | |
| - "torch*" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # Web framework and API | |
| web-framework: | |
| patterns: | |
| - "fastapi" | |
| - "uvicorn" | |
| - "gunicorn" | |
| - "starlette" | |
| - "pydantic*" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # Development and testing tools | |
| dev-tools: | |
| patterns: | |
| - "pytest*" | |
| - "ruff" | |
| - "pre-commit" | |
| - "black" | |
| - "mypy" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # Minor and patch updates for everything else | |
| python-minor-patch: | |
| patterns: | |
| - "*" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| ignore: | |
| - dependency-name: "numpy" | |
| update-types: | |
| - "version-update:semver-major" | |
| labels: | |
| - "dependencies" | |
| - "python" | |
| open-pull-requests-limit: 5 | |
| # ============================================================ | |
| # Frontend (bun) Dependencies | |
| # PR Strategy: | |
| # - Major updates: Individual PR per package | |
| # - Minor updates: Grouped by category (react, ui-components, etc.) | |
| # - Patch updates: Grouped by category | |
| # ============================================================ | |
| - package-ecosystem: "bun" | |
| directory: "/lightrag_webui" | |
| schedule: | |
| interval: "weekly" | |
| day: "friday" | |
| time: "02:00" | |
| timezone: "Asia/Shanghai" | |
| cooldown: | |
| default-days: 5 | |
| semver-major-days: 30 | |
| semver-minor-days: 7 | |
| semver-patch-days: 3 | |
| groups: | |
| # React ecosystem | |
| react: | |
| patterns: | |
| - "react" | |
| - "react-dom" | |
| - "react-router*" | |
| - "@types/react*" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # UI components and styling | |
| ui-components: | |
| patterns: | |
| - "@radix-ui/*" | |
| - "tailwind*" | |
| - "@tailwindcss/*" | |
| - "lucide-react" | |
| - "class-variance-authority" | |
| - "clsx" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # Graph visualization | |
| graph-viz: | |
| patterns: | |
| - "sigma" | |
| - "@sigma/*" | |
| - "graphology*" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # Build tools and dev dependencies | |
| build-tools: | |
| patterns: | |
| - "vite" | |
| - "@vitejs/*" | |
| - "typescript" | |
| - "eslint*" | |
| - "@eslint/*" | |
| - "typescript-eslint" | |
| - "prettier" | |
| - "prettier-*" | |
| - "@types/bun" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # Content rendering libraries (math, diagrams, etc.) | |
| content-rendering: | |
| patterns: | |
| - "katex" | |
| - "mermaid" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| # All other minor and patch updates | |
| frontend-minor-patch: | |
| patterns: | |
| - "*" | |
| update-types: | |
| - "minor" | |
| - "patch" | |
| labels: | |
| - "dependencies" | |
| - "frontend" | |
| open-pull-requests-limit: 5 | |