Skip to content

Commit e4963dd

Browse files
authored
fix: remove invalid security-updates group from dependabot (#39)
The security-updates group used 'security' as an update-type which is not a valid value according to GitHub's dependabot specification. Valid values are: major, minor, patch. This removes the invalid group configuration that was causing the dependabot check to fail, while keeping the valid dev-dependencies group for grouping development tool updates.
1 parent c4c07e4 commit e4963dd

File tree

1 file changed

+1
-6
lines changed

1 file changed

+1
-6
lines changed

.github/dependabot.yml

Lines changed: 1 addition & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
version: 2
2-
# SECURITY: Automated dependency updates with security-focused grouping
2+
# Automated dependency updates for Python packages
33
updates:
44
# Enable version updates for Python packages
55
- package-ecosystem: "pip"
@@ -27,11 +27,6 @@ updates:
2727
update-types:
2828
- "minor"
2929
- "patch"
30-
security-updates:
31-
patterns:
32-
- "*"
33-
update-types:
34-
- "security"
3530
# Configuration options
3631
open-pull-requests-limit: 5
3732
# Allow auto-merge for security updates

0 commit comments

Comments
 (0)