From 6238c7fe1fba47978c5ef0774926bcd870b65398 Mon Sep 17 00:00:00 2001 From: nullhack Date: Mon, 13 Apr 2026 16:32:17 -0400 Subject: [PATCH] fix: remove invalid security-updates group from dependabot The security-updates group used 'security' as an update-type which is not a valid value according to GitHub's dependabot specification. Valid values are: major, minor, patch. This removes the invalid group configuration that was causing the dependabot check to fail, while keeping the valid dev-dependencies group for grouping development tool updates. --- .github/dependabot.yml | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 04044bb..5b86d87 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,5 @@ version: 2 -# SECURITY: Automated dependency updates with security-focused grouping +# Automated dependency updates for Python packages updates: # Enable version updates for Python packages - package-ecosystem: "pip" @@ -27,11 +27,6 @@ updates: update-types: - "minor" - "patch" - security-updates: - patterns: - - "*" - update-types: - - "security" # Configuration options open-pull-requests-limit: 5 # Allow auto-merge for security updates