From de9afeee811687aa872a94a138fdc372ddcd5128 Mon Sep 17 00:00:00 2001
From: Erik Le Blansch <58982453+erikleblansch@users.noreply.github.com>
Date: Sat, 10 Oct 2026 21:06:54 +0200
Subject: [PATCH] chore: configure dependency maintenance

---
 .github/dependabot.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..17f8df7
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,14 @@
+# VOLPAROSSA maintenance: changes are proposed, never auto-merged.
+version: 2
+updates:
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: weekly
+    day: monday
+  open-pull-requests-limit: 3
+  groups:
+    volparossa-security:
+      applies-to: security-updates
+      patterns:
+      - '*'