From a42ae68967fafdc395782352f098541bd326fdd5 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 25 Mar 2026 16:51:57 +0000 Subject: [PATCH 1/5] fix: update dependabot config for workspace support and meaningful groups Remove restrictive allow filter that blocked all non-alloy-js updates. Add 17 semantic dependency groups to reduce PR volume. Add entries for excluded packages (http-client-csharp/java/python). Add GitHub Actions version monitoring. Change workspace npm schedule from daily to weekly. Co-authored-by: timotheeguerin <1031227+timotheeguerin@users.noreply.github.com> Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/43d419ff-678d-4a6a-b9c9-d0b347583d13 --- .github/dependabot.yml | 140 ++++++++++++++++++++++++++++++++++++++++- 1 file changed, 137 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a1830645fec..88125733715 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,6 @@ version: 2 updates: + # Python dependencies for http-client-python - package-ecosystem: "pip" directories: - "/packages/http-client-python/eng/" @@ -14,13 +15,146 @@ updates: include: "scope" labels: - "emitter:client:python" + + # Main pnpm workspace (npm dependencies via catalog) - package-ecosystem: "npm" directory: "/" schedule: - interval: "daily" + interval: "weekly" groups: alloy: patterns: - "@alloy-js/*" - allow: - - dependency-name: "@alloy-js/*" + types: + patterns: + - "@types/*" + testing: + patterns: + - "vitest" + - "@vitest/*" + - "@playwright/test" + - "playwright" + - "@testing-library/*" + - "mocha" + - "happy-dom" + - "c8" + linting: + patterns: + - "eslint" + - "@eslint/*" + - "eslint-plugin-*" + - "@typescript-eslint/*" + - "typescript-eslint" + - "cspell" + build-tools: + patterns: + - "esbuild" + - "esbuild-*" + - "vite" + - "vite-*" + - "@vitejs/*" + - "typescript" + - "tsx" + - "rollup-*" + website: + patterns: + - "astro" + - "astro-*" + - "@astrojs/*" + - "@expressive-code/*" + - "@docsearch/*" + - "rehype-*" + - "remark-*" + - "typedoc" + - "typedoc-*" + - "sharp" + ui: + patterns: + - "react" + - "react-*" + - "@fluentui/*" + - "storybook" + - "@storybook/*" + - "prism-react-renderer" + - "clsx" + vscode: + patterns: + - "@vscode/*" + - "vscode-*" + formatting: + patterns: + - "prettier" + - "prettier-plugin-*" + microsoft: + patterns: + - "@microsoft/*" + - "@chronus/*" + tree-sitter: + patterns: + - "tree-sitter-*" + - "web-tree-sitter" + octokit: + patterns: + - "@octokit/*" + azure: + patterns: + - "@azure/*" + yarnpkg: + patterns: + - "@yarnpkg/*" + babel: + patterns: + - "@babel/*" + scalar: + patterns: + - "@scalar/*" + monaco: + patterns: + - "monaco-editor" + - "monaco-editor-core" + + # http-client-csharp (excluded from pnpm workspace) + - package-ecosystem: "npm" + directory: "/packages/http-client-csharp" + schedule: + interval: "weekly" + labels: + - "emitter:client:csharp" + groups: + all-dependencies: + patterns: + - "*" + + # http-client-java (excluded from pnpm workspace) + - package-ecosystem: "npm" + directory: "/packages/http-client-java" + schedule: + interval: "weekly" + labels: + - "emitter:client:java" + groups: + all-dependencies: + patterns: + - "*" + + # http-client-python npm dependencies (excluded from pnpm workspace) + - package-ecosystem: "npm" + directory: "/packages/http-client-python" + schedule: + interval: "weekly" + labels: + - "emitter:client:python" + groups: + all-dependencies: + patterns: + - "*" + + # GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + actions: + patterns: + - "*" From a8ae9637e56f284d589c5a1186616c61b8ec3cce Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 25 Mar 2026 17:31:41 +0000 Subject: [PATCH 2/5] fix: remove standalone package entries per review feedback Keep only the core pnpm workspace npm entry and GitHub Actions. Remove separate entries for http-client-csharp, http-client-java, and http-client-python. Co-authored-by: timotheeguerin <1031227+timotheeguerin@users.noreply.github.com> Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/564e43af-a39b-4228-b2f6-24c4d7e588a0 --- .github/dependabot.yml | 36 ------------------------------------ 1 file changed, 36 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 88125733715..44a28fb8210 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -113,42 +113,6 @@ updates: - "monaco-editor" - "monaco-editor-core" - # http-client-csharp (excluded from pnpm workspace) - - package-ecosystem: "npm" - directory: "/packages/http-client-csharp" - schedule: - interval: "weekly" - labels: - - "emitter:client:csharp" - groups: - all-dependencies: - patterns: - - "*" - - # http-client-java (excluded from pnpm workspace) - - package-ecosystem: "npm" - directory: "/packages/http-client-java" - schedule: - interval: "weekly" - labels: - - "emitter:client:java" - groups: - all-dependencies: - patterns: - - "*" - - # http-client-python npm dependencies (excluded from pnpm workspace) - - package-ecosystem: "npm" - directory: "/packages/http-client-python" - schedule: - interval: "weekly" - labels: - - "emitter:client:python" - groups: - all-dependencies: - patterns: - - "*" - # GitHub Actions - package-ecosystem: "github-actions" directory: "/" From fe32c89b27f54abdbbfe11d8e885b98a366853a8 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 25 Mar 2026 17:40:26 +0000 Subject: [PATCH 3/5] fix: add exclude-paths for locked workflow files in github-actions Co-authored-by: timotheeguerin <1031227+timotheeguerin@users.noreply.github.com> Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/3486fb44-533b-430f-b6cc-893bccfcae5a --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 44a28fb8210..e00ee555688 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -118,6 +118,8 @@ updates: directory: "/" schedule: interval: "weekly" + exclude-paths: + - ".github/workflows/*.lock.{yaml,yml}" groups: actions: patterns: From dd9a49847928e18ec8dbefdd44ffdd95535325d1 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 25 Mar 2026 17:47:38 +0000 Subject: [PATCH 4/5] fix: separate chronus into its own dependency group Co-authored-by: timotheeguerin <1031227+timotheeguerin@users.noreply.github.com> Agent-Logs-Url: https://github.com/microsoft/typespec/sessions/6f8d96b3-67de-4a21-9772-d03e20c7e684 --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e00ee555688..c3f2ab22bba 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -88,6 +88,8 @@ updates: microsoft: patterns: - "@microsoft/*" + chronus: + patterns: - "@chronus/*" tree-sitter: patterns: From 42626b6ae1a506d1976ffcdc4b1e32f9838492f5 Mon Sep 17 00:00:00 2001 From: Timothee Guerin Date: Wed, 25 Mar 2026 13:56:56 -0400 Subject: [PATCH 5/5] ignore dependabot file --- cspell.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/cspell.yaml b/cspell.yaml index d855e795eea..b6c373adb21 100644 --- a/cspell.yaml +++ b/cspell.yaml @@ -337,6 +337,7 @@ ignorePaths: - packages/typespec-vscode/test/scenarios/** - pnpm-lock.yaml - pnpm-workspace.yaml + - "**/dependabot.yml" - "**/*.mp4" - "**/*.plist" - .git/**