diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d8dbde0..cd2ffb5 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,29 +5,12 @@ updates: directory: "/" schedule: interval: "weekly" - open-pull-requests-limit: 5 + open-pull-requests-limit: 1 commit-message: prefix: "deps" labels: - "dependencies" groups: - uv-minor-and-patch: - patterns: - - "*" - update-types: - - "minor" - - "patch" - - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "weekly" - open-pull-requests-limit: 3 - commit-message: - prefix: "deps" - labels: - - "dependencies" - groups: - github-actions: + uv-all-updates: patterns: - "*" diff --git a/scripts/README.md b/scripts/README.md index e7c9608..c8c98b9 100644 --- a/scripts/README.md +++ b/scripts/README.md @@ -21,5 +21,5 @@ Executable scripts live in this directory. This file is the entry index for the ## Notes - `doctor.sh` and `dependency_health.sh` intentionally remain separate entrypoints and share common prerequisites through [`health_common.sh`](./health_common.sh). -- [`.github/dependabot.yml`](../.github/dependabot.yml) enables weekly Dependabot version updates for `uv` and GitHub Actions with grouped low-risk updates, while `dependency_health.sh` remains the explicit review/audit entrypoint. +- [`.github/dependabot.yml`](../.github/dependabot.yml) prefers a single weekly grouped Dependabot PR for `uv`, while `dependency_health.sh` remains the explicit review/audit entrypoint. - External conformance experiments remain intentionally separate from the default regression path. See [`../docs/conformance.md`](../docs/conformance.md). diff --git a/tests/scripts/test_script_health_contract.py b/tests/scripts/test_script_health_contract.py index 8a22843..6543332 100644 --- a/tests/scripts/test_script_health_contract.py +++ b/tests/scripts/test_script_health_contract.py @@ -46,15 +46,14 @@ def test_scripts_index_documents_split_health_entrypoints() -> None: assert "external A2A conformance experiment entrypoint" in SCRIPTS_INDEX_TEXT assert "dependency review entrypoint" in SCRIPTS_INDEX_TEXT assert "health_common.sh" in SCRIPTS_INDEX_TEXT - assert "weekly Dependabot version updates" in SCRIPTS_INDEX_TEXT + assert "single weekly grouped Dependabot PR for `uv`" in SCRIPTS_INDEX_TEXT -def test_dependabot_configuration_covers_uv_and_github_actions() -> None: +def test_dependabot_configuration_prefers_a_single_grouped_uv_pr() -> None: assert 'package-ecosystem: "uv"' in DEPENDABOT_TEXT - assert 'package-ecosystem: "github-actions"' in DEPENDABOT_TEXT - assert "open-pull-requests-limit: 5" in DEPENDABOT_TEXT - assert "open-pull-requests-limit: 3" in DEPENDABOT_TEXT - assert "uv-minor-and-patch" in DEPENDABOT_TEXT + assert 'package-ecosystem: "github-actions"' not in DEPENDABOT_TEXT + assert "open-pull-requests-limit: 1" in DEPENDABOT_TEXT + assert "uv-all-updates" in DEPENDABOT_TEXT def test_conformance_script_keeps_external_experiment_scope() -> None: