From f8a6793f7e01ebb8d23bad2f0508e46f5b39eb81 Mon Sep 17 00:00:00 2001
From: Nick Cross <ncross@redhat.com>
Date: Tue, 4 Aug 2026 10:59:07 +0100
Subject: [PATCH] Add dependabot/release files

---
 .github/dependabot.yml | 29 +++++++++++++++++++++++++++++
 .github/release.yml    | 15 +++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/release.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..bdc79c1
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,29 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+version: 2
+updates:
+  - package-ecosystem: "maven" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"
+    # wait after a new release till we create a PR, to reduce risk of pulling
+    # a compromised new version
+    cooldown:
+      default-days: 7
+      # Exclude our own repos from cooldown
+      # https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#cooldown-
+      exclude:
+        - "org.jboss.da:*"
+        - "org.jboss.pnc*:*"        # match org.jboss.pnc:xyz and org.jboss.pnc.group:xyz
+        - "org.commonjava*:*"       # match org.commonjava:xyz and org.commonjava.group:xyz
+  - package-ecosystem: "github-actions" # Also update Github actions
+    directory: "/"
+    schedule:
+      # Check for updates to GitHub Actions every week
+      interval: "weekly"
+    # wait after a new release till we create a PR, to reduce risk of pulling
+    # a compromised new version
+    cooldown:
+      default-days: 7
diff --git a/.github/release.yml b/.github/release.yml
new file mode 100644
index 0000000..79c66cc
--- /dev/null
+++ b/.github/release.yml
@@ -0,0 +1,15 @@
+# From https://docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes#creating-automatically-generated-release-notes-for-a-new-release
+changelog:
+  categories:
+    - title: 🐛 Fixes / 🚀 Enhancements
+      labels:
+        - '*'
+      exclude:
+        labels:
+          - dependencies
+    - title: 👒 Project Dependencies
+      labels:
+        - java
+    - title: 👒 CI Dependencies
+      labels:
+        - github_actions