From 341fbc3e63d4f306d3ed388296ce179de17ad9ac Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 23 Oct 2026 16:48:18 +0000 Subject: [PATCH 1/2] ci: add Dependabot config to auto-bump the agent-skills submodule (AI-1070) supabase/evals pins supabase/agent-skills as a git submodule with no Dependabot config, so the pin only moved by hand and evals could run on outdated skills after a skills release. Add a gitsubmodule entry that opens a PR when agent-skills has a newer commit. Co-Authored-By: Claude Sonnet 5.5 Claude-Session: https://claude.ai/code/session_011NL1AWjdSua1PpwMKnMdws --- .github/dependabot.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..ab7e1b0e --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,12 @@ +version: 2 +updates: + # Keeps the `submodules/agent-skills` pin (see .gitmodules) on the latest + # supabase/agent-skills commit so evals don't run against outdated skills. + # For `gitsubmodule`, `directory` is where .gitmodules lives (the repo root); + # Dependabot opens one PR per submodule that has a newer commit. + - package-ecosystem: "gitsubmodule" + directory: "/" + schedule: + interval: "daily" + commit-message: + prefix: "chore(deps)" From be445eb1d859a8bf09f06b8a42ca06cf51339fb1 Mon Sep 17 00:00:00 2001 From: Matt Rossman <22670878+mattrossman@users.noreply.github.com> Date: Fri, 23 Oct 2026 13:37:35 -0400 Subject: [PATCH 2/2] chore: trim dependabot comment --- .github/dependabot.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index ab7e1b0e..67dfa3aa 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,9 +1,7 @@ version: 2 updates: - # Keeps the `submodules/agent-skills` pin (see .gitmodules) on the latest - # supabase/agent-skills commit so evals don't run against outdated skills. - # For `gitsubmodule`, `directory` is where .gitmodules lives (the repo root); - # Dependabot opens one PR per submodule that has a newer commit. + # Bumps the `submodules/agent-skills` pin so evals don't run on outdated skills. + # For `gitsubmodule`, `directory` is where .gitmodules lives. - package-ecosystem: "gitsubmodule" directory: "/" schedule: