From e7be9243d071b37d13d826824ec4bb8c8b39caa2 Mon Sep 17 00:00:00 2001
From: Chris Kay <chris.kay@arm.com>
Date: Mon, 3 Feb 2025 11:25:43 +0000
Subject: [PATCH] chore(dependabot): limit LTS branches to patch updates

This change adjusts the Dependabot settings for the LTS branches such
that Dependabot does not open pull requests for changes which anything
more substantial than patch updates (typically security fixes).

Change-Id: Icc203038e8069e723926849a33c3e8784b544053
Signed-off-by: Chris Kay <chris.kay@arm.com>
---
 .github/dependabot.yml | 24 ++++++++++++++++++++++++
 changelog.yaml         |  8 +++++++-
 2 files changed, 31 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b565bcb8b..4c610adfd 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,33 +5,57 @@ updates:
     directories: ["/"]
     schedule:
       interval: "daily"
+    groups:
+      dev-deps:
+        patterns: ["*"]
+        update-types: ["major", "minor", "patch"]
 
   - target-branch: "lts-v2.10"
     package-ecosystem: "npm"
     directories: ["/"]
     schedule:
       interval: "daily"
+    groups:
+      dev-deps:
+        patterns: ["*"]
+        update-types: ["patch"]
 
   - target-branch: "lts-v2.8"
     package-ecosystem: "npm"
     directories: ["/"]
     schedule:
       interval: "daily"
+    groups:
+      dev-deps:
+        patterns: ["*"]
+        update-types: ["patch"]
 
   - target-branch: "main"
     package-ecosystem: "pip"
     directories: ["/", "/tools/cot_dt2c", "/tools/tlc"]
     schedule:
       interval: "daily"
+    groups:
+      dev-deps:
+        patterns: ["*"]
+        update-types: ["major", "minor", "patch"]
 
   - target-branch: "lts-v2.10"
     package-ecosystem: "pip"
     directories: ["/"]
     schedule:
       interval: "daily"
+    groups:
+      dev-deps:
+        patterns: ["*"]
+        update-types: ["patch"]
 
   - target-branch: "lts-v2.8"
     package-ecosystem: "pip"
     directories: ["/"]
     schedule:
       interval: "daily"
+    groups:
+      dev-deps:
+        patterns: ["*"]
+        update-types: ["patch"]
diff --git a/changelog.yaml b/changelog.yaml
index 90f742510..422b9dafe 100644
--- a/changelog.yaml
+++ b/changelog.yaml
@@ -1,5 +1,5 @@
 #
-# Copyright (c) 2021-2024, Arm Limited. All rights reserved.
+# Copyright (c) 2021-2025, Arm Limited. All rights reserved.
 #
 # SPDX-License-Identifier: BSD-3-Clause
 #
@@ -1418,6 +1418,9 @@ subsections:
     scope: tools
 
     subsections:
+      - title: Dependabot
+        scope: dependabot
+
       - title: STM32 Image
         scope: stm32image
 
@@ -1477,6 +1480,9 @@ subsections:
       - title: Compiler runtime libraries
         scope: compiler-rt
 
+      - title: Development dependencies
+        scope: dev-deps
+
       - title: libfdt
         scope: libfdt