From c790a80374bedea836ff8630ff8d90d0e846274c Mon Sep 17 00:00:00 2001 From: Tobias Raabe Date: Sun, 11 Oct 2026 10:06:57 +0200 Subject: [PATCH 1/2] Run maintenance updates monthly without Dependabot grouping --- .github/dependabot.yml | 2 +- .pre-commit-config.yaml | 3 +++ {{cookiecutter.package_name}}/.github/dependabot.yml | 2 +- {{cookiecutter.package_name}}/.pre-commit-config.yaml | 3 +++ 4 files changed, 8 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 91f1dcf..00b9128 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,6 +4,6 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + interval: "monthly" cooldown: default-days: 7 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 99efaf0..1c65e51 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,3 +1,6 @@ +ci: + autoupdate_schedule: monthly + exclude: | (?x)^( {{cookiecutter.package_name}}/tests/test_import.py diff --git a/{{cookiecutter.package_name}}/.github/dependabot.yml b/{{cookiecutter.package_name}}/.github/dependabot.yml index 91f1dcf..00b9128 100644 --- a/{{cookiecutter.package_name}}/.github/dependabot.yml +++ b/{{cookiecutter.package_name}}/.github/dependabot.yml @@ -4,6 +4,6 @@ updates: - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + interval: "monthly" cooldown: default-days: 7 diff --git a/{{cookiecutter.package_name}}/.pre-commit-config.yaml b/{{cookiecutter.package_name}}/.pre-commit-config.yaml index f73b5d2..0cdd9e5 100644 --- a/{{cookiecutter.package_name}}/.pre-commit-config.yaml +++ b/{{cookiecutter.package_name}}/.pre-commit-config.yaml @@ -1,3 +1,6 @@ +ci: + autoupdate_schedule: monthly + repos: - repo: https://github.com/pre-commit/pre-commit-hooks rev: v6.0.0 From f29858b55594f577e70a00c4d74bdbfd19df1d17 Mon Sep 17 00:00:00 2001 From: Tobias Raabe Date: Sun, 11 Oct 2026 10:11:32 +0200 Subject: [PATCH 2/2] Pin just in generated workflows to satisfy zizmor --- {{cookiecutter.package_name}}/.github/workflows/main.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/{{cookiecutter.package_name}}/.github/workflows/main.yml b/{{cookiecutter.package_name}}/.github/workflows/main.yml index a22a9e1..4d4c7af 100644 --- a/{{cookiecutter.package_name}}/.github/workflows/main.yml +++ b/{{cookiecutter.package_name}}/.github/workflows/main.yml @@ -35,6 +35,8 @@ jobs: enable-cache: true - name: Install just uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b # v3 + with: + just-version: "1.43.1" - run: just typing run-tests: @@ -61,6 +63,8 @@ jobs: python-version: ${{ matrix.python-version }} - name: Install just uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b # v3 + with: + just-version: "1.43.1" - name: Run tests and doctests run: just test-cov