From 73e2cb1c766793d98eeaa404f1cb6625eb17bd4e Mon Sep 17 00:00:00 2001
From: Neil Conway <neil.conway@gmail.com>
Date: Wed, 12 Aug 2026 11:00:45 -0400
Subject: [PATCH] chore: Expand dependabot coverage

---
 .github/dependabot.yml | 33 ++++++++++++++++++++++++++++++---
 1 file changed, 30 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 12ddff783b4d2..7a49c967da226 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -62,8 +62,33 @@ updates:
         update-types:
           - "minor"
           - "patch"
+  # dev/depcheck is a standalone crate excluded from the workspace, so it is
+  # not covered by the workspace entry above
+  - package-ecosystem: cargo
+    directory: "/dev/depcheck"
+    schedule:
+      interval: weekly
+    target-branch: main
+    labels: [auto-dependencies]
+  # the wasm test app has its own npm lockfile
+  - package-ecosystem: npm
+    directory: "/datafusion/wasmtest/datafusion-wasm-app"
+    schedule:
+      interval: weekly
+    labels: [auto-dependencies]
+    groups:
+      # minor and patch bumps are grouped into a single PR
+      all-npm-deps:
+        applies-to: version-updates
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
   - package-ecosystem: "github-actions"
-    directory: "/"
+    # "/" covers workflows in .github/workflows; the glob covers composite
+    # actions such as .github/actions/setup-builder
+    directories: ["/", "/.github/actions/*"]
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
@@ -72,8 +97,10 @@ updates:
       codeql-actions:
         patterns:
           - "github/codeql-action/*"
-  - package-ecosystem: "pip"
-    directory: "/docs"
+  # Python dependencies are managed as a uv workspace rooted at the top-level
+  # pyproject.toml with a shared uv.lock
+  - package-ecosystem: "uv"
+    directory: "/"
     schedule:
       interval: "weekly"
     labels: [auto-dependencies]