Repository navigation
[Repo Assist] chore: add Dependabot configuration for automated dependency updates #4489
Description
🤖 This PR was created by Repo Assist, an automated AI assistant.
Summary
Adds .github/dependabot.yml to enable Dependabot automated dependency updates across all package ecosystems used in the repository.
Motivation
The repository currently has no Dependabot configuration, so outdated or vulnerable dependencies are only caught manually. Enabling Dependabot ensures:
- Security patches are surfaced automatically via PRs
- Dependencies stay up-to-date with minimal manual effort
- GitHub Actions version pins don't go stale (currently
actions/github-script@v3is very old; Dependabot would flag it)
Ecosystems Covered
| Ecosystem | Path | Purpose |
|---|---|---|
npm |
/ |
Root package.json (markdownlint-cli) |
nuget |
/ |
All .fsproj NuGet dependencies |
github-actions |
/ |
.github/workflows/*.yml action versions |
pip |
/ |
pyproject.toml Python dev dependencies |
cargo |
/src/fable-library-rust |
Rust runtime library dependencies |
cargo |
/src/fable-library-py |
Python Rust extension (fable-library-core) dependencies |
Each ecosystem checks weekly and caps open PRs to avoid queue flooding. All Dependabot PRs are tagged with the dependencies label.
Trade-offs
- This may generate several PRs initially as Dependabot scans for the first time; maintainers can close or ignore any updates they don't want.
- Major version bumps from Dependabot should be reviewed carefully; the weekly schedule gives time to do so.
Warning
Protected Files
This was originally intended as a pull request, but the patch modifies protected files. These files may affect project dependencies, CI/CD pipelines, or agent behaviour. Please review the changes carefully before creating the pull request.
Click here to create the pull request once you have reviewed the changes
Protected files
To route changes like this to a review issue instead of blocking, configure protected-files: fallback-to-issue in your workflow configuration.
Note
🔒 Integrity filter blocked 103 items
The following items were blocked because they don't meet the GitHub integrity level.
- #4488
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #4474
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #4220
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #4166
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #4143
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #4104
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #4044
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #4038
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #3290
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #2279
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - #2154
list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - [Feature] Array2D operations #1764
list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - Is there a way to get attributes on a union case? #2026
list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - Reflection for classes #2027
list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - StackOverflowException when compiling large match expression #2039
list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - Error doesn't show .fs line number #2052
list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved". - ... and 87 more items
To allow these resources, lower min-integrity in your GitHub frontmatter:
tools:
github:
min-integrity: approved # merged | approved | unapproved | noneGenerated by Repo Assist · ● 3.7M · ◷
To install this agentic workflow, run
gh aw add githubnext/agentics/workflows/repo-assist.md@346204513ecfa08b81566450d7d599556807389f
Activity