Branch: refs/heads/main Home: https://github.com/hibernate/hibernate-orm Commit: ceced2409563799b195d69f1980ba16539cafac8 https://github.com/hibernate/hibernate-orm/commit/ceced2409563799b195d69f... Author: Yoann Rodière <yoann(a)hibernate.org&gt; Date: 2025-06-23 (Mon, 23 Jun 2025) Changed paths: M .github/dependabot.yml M .github/hibernate-github-bot.yml M .github/workflows/ci.yml Log Message: ----------- Enable dependabot for most dependencies The idea is that we'd merge updates in the "build-dependencies" group as-is, without a Jira issue. **We would still have to adjust/re-create other update PRs** (such as Jandex) to assign them a Jira issue. We could consider limiting the dependencies covered by dependabot, but I find that grouping, at least, allows a fairly manageable rate of dependabot PRs. Runtime dependency updates should be more rare anyway, as their number is limited and they're generally less active (e.g. Jakarta Persistence doesn't release a micro every week). The most important ones are the runtime ones, e.g. bytebuddy, so we could consider ignoring/limiting build dependency updates if necessary. To unsubscribe from these emails, change your notification settings at https://github.com/hibernate/hibernate-orm/settings/notifications