Skip to content

Run Dependabot daily instead of weekly - #198

Merged
kapersoft merged 2 commits into
mainfrom
cursor/dependabot-daily-schedule-1151
Aug 25, 2026
Merged

Run Dependabot daily instead of weekly#198
kapersoft merged 2 commits into
mainfrom
cursor/dependabot-daily-schedule-1151

Conversation

@kapersoft

@kapersoft kapersoft commented Aug 25, 2026

Copy link
Copy Markdown
Owner

Summary

  • weekly-deployment.yml was already removed from main (Monday Ploi deploy at 05:00). This PR does not reintroduce it.
  • Dependabot version updates for Composer and GitHub Actions now run daily (weekdays) instead of only on Monday, which is the most frequent first-class Dependabot interval.
  • Existing Europe/Amsterdam check times are kept (02:00 for Actions, 03:00 for Composer). schedule.day is dropped because it only applies to weekly intervals.
  • Pest now asserts the daily Dependabot cadence and that weekly-deployment.yml stays gone.

Dependabot security updates were already event-driven; this change is for version updates so patch/minor PRs (which dependabot-auto-merge still squash-merges) land throughout the week instead of in a Monday batch.

Test plan

  • Confirm .github/workflows/weekly-deployment.yml is absent on main and this branch
  • Parse .github/dependabot.yml as valid YAML with interval: daily and no day
  • php artisan test --compact --filter=dependabot (and weekly-deployment absence)
  • GitHub Actions on this PR (Pest, Pint, PHPStan, Rector, Composer Normalize)
  • After merge, Dependabot Insights / the next weekday run should list a daily schedule for both ecosystems
Open in Web Open in Cursor 

Weekly-deployment is already gone; version updates now check every weekday so patches land continuously instead of waiting for Monday.

Co-authored-by: kapersoft <kapersoft@gmail.com>
@kapersoft
kapersoft marked this pull request as ready for review August 25, 2026 05:29
Lock in weekday version updates and the absence of weekly-deployment.yml so the cadence cannot regress to Monday-only.

Co-authored-by: kapersoft <kapersoft@gmail.com>
@kapersoft
kapersoft enabled auto-merge (squash) August 25, 2026 05:33
@kapersoft
kapersoft disabled auto-merge August 25, 2026 05:35
@kapersoft
kapersoft merged commit 84e62ab into main Aug 25, 2026
7 checks passed
@kapersoft
kapersoft deleted the cursor/dependabot-daily-schedule-1151 branch August 25, 2026 05:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants