Dependabot Auto-Merge Configuration Pack
Dependabot configs for Node.js, Python, Docker, Terraform, and GitHub Actions with auto-merge rules for patch updates and weekly schedules for major versions.
Dependabot Configuration for 5 Ecosystems
Pre-written Dependabot configuration files for Node.js, Python, Docker, Terraform, and GitHub Actions — with matching auto-merge rules that keep your dependencies current without interrupting your workflow.
What's Included
- Dependabot configs for Node.js (npm), Python (pip), Docker, Terraform, and GitHub Actions
- Auto-merge rules: patch updates merge automatically, minor/major updates open PRs for review
- Weekly schedules for major version PRs to reduce noise
- Grouping rules to batch related dependency updates into single PRs
- GitHub Actions auto-merge workflow triggered on Dependabot PRs
What You Get
.github/dependabot.yml— Dependabot configuration for all 5 ecosystems.github/workflows/dependabot-auto-merge.yml— auto-merge workflow- Per-ecosystem configuration examples you can mix and match
README.md— configuration options, customization guide, and gotchas
Requirements
- GitHub repository with Dependabot enabled
- GITHUB_TOKEN with
pull-requests: writepermission (automatic in Actions)