plugin-tools icon indicating copy to clipboard operation
plugin-tools copied to clipboard

feat: add dependabot config for plugins

Open joonseolee opened this issue 1 month ago • 3 comments

What this PR does / why we need it:

Adds .github/dependabot.yml template to scaffolded plugins to enable automated dependency updates.

Which issue(s) this PR fixes:

Fixes #2209

Special notes for your reviewer:

  • Daily dependency checks for npm, GitHub Actions, and Go modules (when backend is enabled)
  • Package grouping to reduce PR noise (Grafana packages and tooling grouped separately)
  • Consistent 5 PR limit across all ecosystems

joonseolee avatar Oct 29 '25 23:10 joonseolee

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar Oct 29 '25 23:10 CLAassistant

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

CLAassistant avatar Oct 29 '25 23:10 CLAassistant

@jackw

I have changed some lines.
Can you check it again?

joonseolee avatar Nov 12 '25 00:11 joonseolee

@joonseolee would you be able to take a look at the last round of feedback? If you don't have the time feel free to let us know and myself or a colleague will address the feedback and get the PR merged. Thanks. ✌️

jackw avatar Dec 02 '25 08:12 jackw