# For VS Code you can install 'YAML extension by Red Hat' to help you validate it (not a full validator, but helps)

# https://marketplace.visualstudio.com/items?itemName=redhat.vscode-yaml

#

# See this currently open issue for validating the config: https://github.com/dependabot/dependabot-core/issues/4605

version: 2

updates:

# dependabot for uv has a number of issues that caused other projects to remove it completely:

# https://github.com/Harmon758/Harmonbot/commit/003d12f9d00fdb75f6b73dc8e05e41cf90da893d

# They are being slowly addressed but it's not yet fully functional.

# The main task for tracking progress is here: https://github.com/astral-sh/uv/issues/2512

- package-ecosystem: "uv"

directory: "/"

schedule:

interval: "weekly"

exclude-paths:

- "src/inspect_evals/**"

- package-ecosystem: "github-actions"

directory: "/"

schedule:

interval: "weekly"

groups:

actions:

patterns:

- "*"