From fe41c96036122a479c27a52045caeb97c6e547e5 Mon Sep 17 00:00:00 2001
From: iliassjabali <iliassjabali@gmail.com>
Date: Sun, 12 Apr 2026 00:33:49 +0100
Subject: [PATCH] ci: add Dependabot config for npm, pip, docker, and actions

---
 .github/dependabot.yml | 136 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 136 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..bf03d90
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,136 @@
+version: 2
+updates:
+  # GitHub Actions (workflows under .github/workflows)
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - ci
+    groups:
+      actions-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  # Root pnpm workspace (covers all packages/* with package.json)
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - npm
+    groups:
+      npm-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  # Python: control-plane (requirements.txt)
+  - package-ecosystem: pip
+    directory: "/packages/control-plane"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - python
+    groups:
+      pip-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  # Python: operator (requirements.txt)
+  - package-ecosystem: pip
+    directory: "/packages/operator"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - python
+    groups:
+      pip-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  # Python: sdk-python (pyproject.toml)
+  - package-ecosystem: pip
+    directory: "/packages/sdk-python"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - python
+    groups:
+      pip-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  # Python: sdk-langgraph (pyproject.toml)
+  - package-ecosystem: pip
+    directory: "/packages/sdk-langgraph"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - python
+    groups:
+      pip-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  # Docker: control-plane
+  - package-ecosystem: docker
+    directory: "/packages/control-plane"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 3
+    labels:
+      - dependencies
+      - docker
+    groups:
+      docker-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  # Docker: operator
+  - package-ecosystem: docker
+    directory: "/packages/operator"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 3
+    labels:
+      - dependencies
+      - docker
+    groups:
+      docker-minor-patch:
+        update-types:
+          - minor
+          - patch
+
+  # Docker: sidecar
+  - package-ecosystem: docker
+    directory: "/packages/sidecar"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 3
+    labels:
+      - dependencies
+      - docker
+    groups:
+      docker-minor-patch:
+        update-types:
+          - minor
+          - patch