From 3eb3c35486b816d0f9c3ef1b9356e1846b7c7092 Mon Sep 17 00:00:00 2001 From: Andy Allan Date: Thu, 10 Sep 2026 15:47:40 +0100 Subject: [PATCH] Configure dependabot to update all dependencies Previously, dependabot would only update gems mentioned in the gemfile, and any dependencies of updated gems. This means that if the top-level gem doesn't change, none of its dependencies were candidates. So for a wrapper gem (like `dartsass-sprockets`) that doesn't need to change often, the underlying dependencies (like `sprockets`) were often becoming out-of-date. --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a7e069d6f..3cb2fe5b4 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,6 +3,8 @@ updates: - package-ecosystem: "bundler" versioning-strategy: "lockfile-only" directory: "/" + allow: + - dependency-type: "all" groups: rails: applies-to: version-updates -- 2.47.3