From f6ce12065326cb9ee5349fa1b3b436910c3768ce Mon Sep 17 00:00:00 2001 From: Slavi Pantaleev Date: Thu, 27 Aug 2026 22:10:56 +0300 Subject: [PATCH] Stop running Dependabot alongside Renovate Both were updating `github-actions` daily, so both proposed the same bumps. actions/setup-python v7 arrived twice within an hour: Renovate as #5575, Dependabot as #5576. Renovate is the one to keep. It pins actions to digests via `helpers:pinGitHubActionDigests`, so master carries `actions/setup-python@5fda3b9... # v7`, while Dependabot proposes a bare `@v7` and would undo that pinning. Renovate's bumps also merge on a branch once CI has run them, whereas Dependabot's sit outside every automerge rule here and need a human for each one. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01SEH3vxYSQ5SV4N5z61eyGT --- .github/dependabot.yaml | 11 ----------- 1 file changed, 11 deletions(-) delete mode 100644 .github/dependabot.yaml diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml deleted file mode 100644 index dad8d2cf2..000000000 --- a/.github/dependabot.yaml +++ /dev/null @@ -1,11 +0,0 @@ -# SPDX-FileCopyrightText: 2022 Marko Weltzer -# -# SPDX-License-Identifier: AGPL-3.0-or-later - ---- -version: 2 -updates: - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: daily