feat: Add Dependabot + Update dependencies#614
Merged
Conversation
Signed-off-by: Boss_1s <95505913+Boss-1s@users.noreply.github.com>
Signed-off-by: Boss_1s <95505913+Boss-1s@users.noreply.github.com>
Signed-off-by: Boss_1s <95505913+Boss-1s@users.noreply.github.com>
Bumps [nexterias/actions-vercel](https://github.com/nexterias/actions-vercel) from 1 to 2. - [Release notes](https://github.com/nexterias/actions-vercel/releases) - [Commits](nexterias/actions-vercel@v1...v2) --- updated-dependencies: - dependency-name: nexterias/actions-vercel dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3 to 6. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v3...v6) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
--- updated-dependencies: - dependency-name: aiohttp dependency-version: 3.13.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [requests](https://github.com/psf/requests) from 2.32.5 to 2.34.0. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.5...v2.34.0) --- updated-dependencies: - dependency-name: requests dependency-version: 2.34.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [rich](https://github.com/Textualize/rich) from 14.2.0 to 15.0.0. - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.2.0...v15.0.0) --- updated-dependencies: - dependency-name: rich dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…s/actions-vercel-2 chore(deps): bump nexterias/actions-vercel from 1 to 2
…setup-python-6 chore(deps): bump actions/setup-python from 3 to 6
…checkout-6 chore(deps): bump actions/checkout from 4 to 6
chore(deps): bump aiohttp from 3.13.3 to 3.13.5
chore(deps): bump requests from 2.32.5 to 2.34.0
chore(deps): bump rich from 14.2.0 to 15.0.0
Collaborator
|
Only @TimMcCool can enable Dependabot 
|
Contributor
Author
|
Alr |
Collaborator
|
didn't you say that tim needs to enable dependabot first? |
Collaborator
He does. But we can update dependencies still, and if/when he does enable it, we will already have config. Should this be merged? |
TheCommCraft
approved these changes
May 15, 2026
Collaborator
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Solves issue #612
Changes
Created dependabot.yml (you may need to turn it on explicitly in Security and quality)
Updated the following dependencies:
rich (14.2.0 to 15.0.0)
requests (2.32.5 to 2.34.0)
aiohttp (3.13.3 to 3.13.5)
actions/checkout (4 to 6)
actions/setup-python (3 to 6)
nexterias/actions-vercel (1 to 2)
Please let me know if anything needs to be downgraded due to compatibility issues.
Tests
deployment passed so I assume it worked