From 5a273e0c3863b1c6c4737d328073534c95d8cc9f Mon Sep 17 00:00:00 2001
From: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>
Date: Sun, 23 Aug 2026 12:08:18 -0700
Subject: [PATCH] chore(infra): cover Docker dependencies with Dependabot
 (#39693)

## Summary

- add monthly Dependabot coverage for the maintained
development-container Compose file
- add monthly Dependabot coverage for the LangChain development
Dockerfile
- keep major updates separate from minor and patch updates

## Test Plan

- parsed `.github/dependabot.yml` with Ruby `YAML.safe_load_file`
- ran `git diff --check`
- verified the staged diff contains only `.github/dependabot.yml`

This contribution was prepared with AI-agent assistance.

Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
---
 .github/dependabot.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index dd8862eb83..49b32ee871 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -117,3 +117,23 @@ updates:
           - "*"
         update-types:
           - "major"
+
+
+  - package-ecosystem: "docker"
+    directories:
+      - "/.devcontainer/"
+      - "/libs/langchain/"
+    schedule:
+      interval: "monthly"
+    groups:
+      minor-and-patch:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      major:
+        patterns:
+          - "*"
+        update-types:
+          - "major"