From ffd3bd831c04f8584c469a2a3ebdae9fdca2e42f Mon Sep 17 00:00:00 2001
From: Anthony Brown <anthony.brown8@nhs.net>
Date: Thu, 12 Mar 2026 09:12:04 +0000
Subject: [PATCH] stagger dependabot

---
 .github/dependabot.yml | 62 +++++++++++++++++++-----------------------
 1 file changed, 28 insertions(+), 34 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0a9ababf..86f3eaf9 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,72 +1,66 @@
 #########################################################################
 # Dependabot configuration file
-# -----------------------------
-# Checks for updates for the following components:
-# - API Specification (OAS): npm
-# - E2E Tests (Pact tests): npm
-# - EPS API (Coordinator): npm + Docker
-# - EPS API Tool (EPSAT): npm + Docker
-#
-# rebase-strategy is set to 'disabled', as automated rebasing was causing
-# too many CI environments to be created, reducing available capacity for
-# us and other teams as well.
 #########################################################################
 
 version: 2
+registries:
+  npm-github:
+    type: npm-registry
+    url: https://npm.pkg.github.com
+    token: ${{secrets.DEPENDABOT_TOKEN}}
+
 updates:
-  - package-ecosystem: "github-actions"
-    # Workflow files stored in the
-    # default location of `.github/workflows`
+  ###################################
+  # Poetry  #########################
+  ###################################
+  - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "friday"
-      time: "18:00" # UTC
-    open-pull-requests-limit: 20
+      time: "18:00" #UTC
+    versioning-strategy: increase
+    open-pull-requests-limit: 20  
     commit-message:
       prefix: "Upgrade: [dependabot] - "
-
-
-  ###################################
-  # Java workspace  ##################
-  ###################################
-  - package-ecosystem: "maven"
+  - package-ecosystem: "github-actions"
+    # Workflow files stored in the
+    # default location of `.github/workflows`
     directory: "/"
-    rebase-strategy: "disabled"
     schedule:
       interval: "weekly"
       day: "friday"
-      time: "18:00" # UTC
-    open-pull-requests-limit: 20
+      time: "19:00" #UTC
+    open-pull-requests-limit: 20  
     commit-message:
       prefix: "Upgrade: [dependabot] - "
 
-
   ###################################
-  # Poetry  #########################
+  # NPM workspace  ##################
   ###################################
-  - package-ecosystem: "pip"
+  - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "friday"
-      time: "18:00" # UTC
+      time: "20:00" #UTC
+    versioning-strategy: increase
     open-pull-requests-limit: 20
     commit-message:
       prefix: "Upgrade: [dependabot] - "
-    versioning-strategy: increase
-
+    registries:
+      - npm-github
 
   ###################################
-  # NPM workspace  ##################
+  # Java workspace  ##################
   ###################################
-  - package-ecosystem: "npm"
+  - package-ecosystem: "maven"
     directory: "/"
+    rebase-strategy: "disabled"
     schedule:
       interval: "weekly"
       day: "friday"
-      time: "18:00" # UTC
+      time: "21:00" # UTC
     open-pull-requests-limit: 20
     commit-message:
       prefix: "Upgrade: [dependabot] - "
-    versioning-strategy: increase