From 4a5891abda72f49cf96fe53092dc063ce9678d49 Mon Sep 17 00:00:00 2001
From: Irfan Maulana <mazipanneh@gmail.com>
Date: Sat, 1 Aug 2026 10:12:05 +0700
Subject: [PATCH] Enhance Dependabot configuration for npm and GitHub Actions

Added GitHub Actions support and updated npm settings.
---
 .github/dependabot.yml | 28 +++++++++++++++++++++++++++-
 1 file changed, 27 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8e3bcb5..8dae699 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,12 +1,38 @@
 version: 2
 updates:
-  - package-ecosystem: "npm" # bun projects use the npm ecosystem in Dependabot
+  - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
+    labels: ['dependencies', 'javascript']
     cooldown:
       default-days: 7
     ignore:
       - dependency-name: "*"
         update-types: ["version-update:semver-major"]
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    cooldown:
+      default-days: 5
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: 'chore'
+      include: 'scope'
+    labels: ['dependencies', 'github-actions']
+    groups:
+      github-official:
+        applies-to: version-updates
+        patterns:
+          - 'actions/*'
+        update-types:
+          - 'major'
+          - 'minor'
+          - 'patch'
+      security-updates:
+        applies-to: security-updates
+        update-types:
+          - 'patch'
+          - 'minor'