From 10343b557d810e8c4b62cfbf432f3b91294535a3 Mon Sep 17 00:00:00 2001
From: Emily KL <4672118+emilykl@users.noreply.github.com>
Date: Mon, 14 Sep 2026 18:27:15 -0400
Subject: [PATCH 1/2] add js config to dependabot.yml

---
 .github/dependabot.yml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index faa561735f..87bd4416fc 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -32,3 +32,20 @@ updates:
     labels: ["no-changelog"]
     cooldown:
       default-days: 3
+
+  # Update version for JavaScript dependencies for Jupyter widget.
+  # Note: If the dependency update results in a changed build artifact,
+  # the `check-js-build` workflow will fail on the resulting PR.
+  # As currently configured, this will require a manual push of the
+  # updated build artifacts to resolve.
+  - package-ecosystem: "npm"
+    directory: "/js"
+    schedule:
+      interval: "monthly"
+    groups:
+      javascript-dependencies:
+        patterns:
+          - "*"
+    labels: ["no-changelog"]
+    cooldown:
+      default-days: 3

From 37e5aa20558aebf3e8894c360cc01d1fe95e439a Mon Sep 17 00:00:00 2001
From: Emily KL <4672118+emilykl@users.noreply.github.com>
Date: Mon, 14 Sep 2026 18:32:33 -0400
Subject: [PATCH 2/2] ignore plotly.js for dependabot

---
 .github/dependabot.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 87bd4416fc..961798cda6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -49,3 +49,5 @@ updates:
     labels: ["no-changelog"]
     cooldown:
       default-days: 3
+    ignore:
+      - dependency-name: "plotly.js"  # We want to handle plotly.js updates manually