From c19bf736cb3db8228502ad1fadf994208ace2ae9 Mon Sep 17 00:00:00 2001 From: Aaron Coburn Date: Wed, 8 Jul 2026 12:09:52 -0500 Subject: [PATCH 1/2] build: standardize dependabot schedule and grouping ESS-7515 --- .github/dependabot.yml | 48 ++++++++++++++++++------------------------ 1 file changed, 20 insertions(+), 28 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 80a015c8e8a..7d81cea22e9 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,30 +3,26 @@ updates: - package-ecosystem: "maven" directory: "/" schedule: - interval: "cron" - cronjob: "30 4 1,15 * *" + interval: "weekly" groups: - plugins: - patterns: - - "org.apache.maven.plugins:*" - - "com.mycila:license-maven-plugin" - - "org.jacoco:jacoco-maven-plugin" - - "org.sonarsource.scanner.maven:sonar-maven-plugin" - - "org.sonatype.plugins:nexus-staging-maven-plugin" - - "org.owasp:dependency-check-maven" - - "com.puppycrawl.tools:checkstyle" + test: + dependency-type: "development" + main: + dependency-type: "production" - package-ecosystem: "github-actions" directory: "/" + groups: + gh-actions: + patterns: ["*"] schedule: - interval: "monthly" + interval: "weekly" # 1.3 Maintenance - package-ecosystem: "maven" directory: "/" schedule: - interval: "cron" - cronjob: "30 4 1,15 * *" + interval: "weekly" target-branch: "1.3" ignore: - dependency-name: "org.eclipse.rdf4j:rdf4j-*" @@ -44,20 +40,15 @@ updates: - "backport" - "1.3" groups: - plugins: - patterns: - - "org.apache.maven.plugins:*" - - "com.mycila:license-maven-plugin" - - "org.jacoco:jacoco-maven-plugin" - - "org.sonarsource.scanner.maven:sonar-maven-plugin" - - "org.sonatype.plugins:nexus-staging-maven-plugin" - - "org.owasp:dependency-check-maven" + test: + dependency-type: "development" + main: + dependency-type: "production" - package-ecosystem: "maven" directory: "/rdf4j/" schedule: - interval: "cron" - cronjob: "30 4 1,15 * *" + interval: "weekly" target-branch: "1.3" allow: - dependency-name: "org.eclipse.rdf4j:rdf4j-*" @@ -68,8 +59,7 @@ updates: - package-ecosystem: "maven" directory: "/spring/" schedule: - interval: "cron" - cronjob: "30 4 1,15 * *" + interval: "weekly" target-branch: "1.3" allow: - dependency-name: "org.springframework.security:spring-*" @@ -79,10 +69,12 @@ updates: - package-ecosystem: "github-actions" directory: "/" + groups: + gh-actions: + patterns: ["*"] schedule: - interval: "monthly" + interval: "weekly" target-branch: "1.3" labels: - "backport" - "1.3" - From 1e989bdba9b87cf183de406566aa11f44d8882eb Mon Sep 17 00:00:00 2001 From: Aaron Coburn Date: Wed, 8 Jul 2026 12:27:46 -0500 Subject: [PATCH 2/2] build: remove maven dependency-type groups ESS-7515 --- .github/dependabot.yml | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7d81cea22e9..21a3e37784f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,11 +4,6 @@ updates: directory: "/" schedule: interval: "weekly" - groups: - test: - dependency-type: "development" - main: - dependency-type: "production" - package-ecosystem: "github-actions" directory: "/" @@ -39,11 +34,6 @@ updates: labels: - "backport" - "1.3" - groups: - test: - dependency-type: "development" - main: - dependency-type: "production" - package-ecosystem: "maven" directory: "/rdf4j/"