From 33370eaa5cc8c8f21859fdb3101ecea2a330b8ba Mon Sep 17 00:00:00 2001 From: Maxime Beauchemin Date: Tue, 4 Mar 2025 12:23:12 -0800 Subject: [PATCH] chore: enable dependabot using uv for auto-bumping python packages (#32501) --- .github/dependabot.yml | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 102c158b986..3e373f16b4a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,4 +1,5 @@ version: 2 +enable-beta-ecosystems: true updates: - package-ecosystem: "github-actions" @@ -21,9 +22,14 @@ updates: versioning-strategy: increase - # - package-ecosystem: "pip" - # NOTE: as dependabot isn't compatible with our usage of `uv pip compile` we're using - # `supersetbot` instead + # NOTE: `uv` support is in beta, more details here: + # https://github.com/dependabot/dependabot-core/pull/10040#issuecomment-2696978430 + - package-ecosystem: "uv" + directory: "requirements/" + open-pull-requests-limit: 10 + labels: + - uv + - dependabot - package-ecosystem: "npm" directory: ".github/actions"