From 8a8e6dcbe0fb3f64e437db8e3c463a6d61a0a085 Mon Sep 17 00:00:00 2001
From: Dave Bunten <dave.bunten@cuanschutz.edu>
Date: Wed, 30 Oct 2024 16:21:10 -0600
Subject: [PATCH] ci(dependabot): enable auto poetry updates (#463)

* ci(dependabot): enable auto poetry lock updates

* monthly sched; group minor + patch updates

Co-Authored-By: Ken Brewer <kenibrewer@users.noreply.github.com>

---------

Co-authored-by: Ken Brewer <kenibrewer@users.noreply.github.com>
---
 .github/dependabot.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 9f03cf85..fb81eede 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -20,3 +20,18 @@ updates:
     schedule:
       # Check for updates to GitHub Actions every week
       interval: "weekly"
+  # Perform checks and updates for python poetry environment.
+  # See here for more information:
+  # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#pip-and-pip-compile
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      # Check for updates to poetry lockfile every week
+      interval: "monthly"
+    groups:
+      python-packages:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"