# Dependabot configuration for automated dependency updates # Documentation: https://docs.github.com/en/code-security/dependabot version: 2 updates: # Python dependencies - package-ecosystem: "pip" directory: "/" schedule: interval: "weekly" day: "monday" time: "09:00" open-pull-requests-limit: 10 reviewers: - "kuaishou/wan-maintainers" # Update with actual team assignees: - "kuaishou/wan-maintainers" # Update with actual team labels: - "dependencies" - "python" commit-message: prefix: "deps" prefix-development: "deps-dev" include: "scope" # Group minor and patch updates together groups: pytorch-ecosystem: patterns: - "torch*" - "torchvision" update-types: - "minor" - "patch" transformers-ecosystem: patterns: - "transformers" - "diffusers" - "accelerate" update-types: - "minor" - "patch" dev-dependencies: dependency-type: "development" update-types: - "minor" - "patch" # Ignore specific dependencies that need manual updates ignore: # Flash attention requires specific CUDA versions - dependency-name: "flash-attn" update-types: ["version-update:semver-major"] # PyTorch major updates require testing - dependency-name: "torch" update-types: ["version-update:semver-major"] - dependency-name: "torchvision" update-types: ["version-update:semver-major"] # Allow specific versions allow: - dependency-type: "direct" - dependency-type: "production" - dependency-type: "development" # GitHub Actions - package-ecosystem: "github-actions" directory: "/" schedule: interval: "weekly" day: "monday" time: "09:00" open-pull-requests-limit: 5 reviewers: - "kuaishou/wan-maintainers" labels: - "dependencies" - "github-actions" commit-message: prefix: "ci" include: "scope" groups: github-actions: patterns: - "*" update-types: - "minor" - "patch" # Docker (if Dockerfile exists) # - package-ecosystem: "docker" # directory: "/" # schedule: # interval: "weekly" # labels: # - "dependencies" # - "docker"