From be8c546616a8f677d977b72eaa3b2fc32a18b1ed Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 31 Jul 2026 22:01:45 +0000 Subject: [PATCH] Enable Dependabot for the tests/data submodule The libmaxminddb submodule is excluded because it is pinned to release tags and compiled into our published wheels, while Dependabot would move it to the latest commit on main whenever no newer tag exists. --- .github/dependabot.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 8b2f232..eac3468 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -21,3 +21,16 @@ updates: - github/codeql-action* cooldown: default-days: 7 + - package-ecosystem: gitsubmodule + directory: / + schedule: + interval: weekly + day: monday + time: '14:00' + cooldown: + default-days: 7 + ignore: + # libmaxminddb is pinned to release tags and compiled into our wheels. + # Dependabot moves submodules to the latest commit on the tracked branch + # when no newer tag exists, which would take us off release tags. + - dependency-name: extension/libmaxminddb