diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..b6e7c3e --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,62 @@ +version: 2 + +updates: + # Root project: uv-managed Python dependencies (pyproject.toml + uv.lock) + - package-ecosystem: "uv" + directory: "/" + schedule: + interval: "weekly" + groups: + python: + patterns: + - "*" + + # Runtime services: pip-installed from pyproject.toml in Docker images + - package-ecosystem: "pip" + directory: "/runtimes/eoapi/stac" + schedule: + interval: "weekly" + groups: + stac: + patterns: + - "*" + + - package-ecosystem: "pip" + directory: "/runtimes/eoapi/raster" + schedule: + interval: "weekly" + groups: + raster: + patterns: + - "*" + + - package-ecosystem: "pip" + directory: "/runtimes/eoapi/vector" + schedule: + interval: "weekly" + groups: + vector: + patterns: + - "*" + + # CDK CLI (used alongside aws-cdk-lib in the deploy group) + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + + # Docker base images, Dockerfiles, and docker-compose image pins + - package-ecosystem: "docker" + directory: "/" + schedule: + interval: "weekly" + + # GitHub Actions workflow dependencies + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + github-actions: + patterns: + - "*" diff --git a/runtimes/eoapi/stac/pyproject.toml b/runtimes/eoapi/stac/pyproject.toml index 19f22d7..99e12f2 100644 --- a/runtimes/eoapi/stac/pyproject.toml +++ b/runtimes/eoapi/stac/pyproject.toml @@ -20,7 +20,7 @@ classifiers = [ dynamic = ["version"] dependencies = [ "orjson", - "stac-fastapi.pgstac>=6.0,<6.1", + "stac-fastapi.pgstac>=6.0,<6.2", "jinja2>=2.11.2,<4.0.0", "starlette-cramjam>=0.4,<0.6", "psycopg_pool",