From bd9510c5cc4537a97855b620ad46f311fa64d44f Mon Sep 17 00:00:00 2001
From: William Woodruff <william@yossarian.net>
Date: Fri, 17 Oct 2025 23:48:19 -0400
Subject: [PATCH] feat(lsp): add a document filter for Dependabot (#1262)

---
 .github/workflows/release-pypi.yml | 4 ++--
 crates/zizmor/src/lsp.rs           | 5 +++++
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release-pypi.yml b/.github/workflows/release-pypi.yml
index 71217ffd..98337040 100644
--- a/.github/workflows/release-pypi.yml
+++ b/.github/workflows/release-pypi.yml
@@ -5,7 +5,7 @@ on:
     branches:
       - main
     tags:
-      - 'v*'
+      - "v*"
   workflow_dispatch:
 
 permissions:
@@ -170,7 +170,7 @@ jobs:
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
         with:
-          subject-path: 'wheels-*/*'
+          subject-path: "wheels-*/*"
       - name: Publish to PyPI
         if: ${{ startsWith(github.ref, 'refs/tags/') }}
         uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
diff --git a/crates/zizmor/src/lsp.rs b/crates/zizmor/src/lsp.rs
index cb265441..b0771034 100644
--- a/crates/zizmor/src/lsp.rs
+++ b/crates/zizmor/src/lsp.rs
@@ -67,6 +67,11 @@ impl LanguageServer for Backend {
                 scheme: None,
                 pattern: Some("**/action.{yml,yaml}".into()),
             },
+            lsp_types::DocumentFilter {
+                language: Some("yaml".into()),
+                scheme: None,
+                pattern: Some("**/.github/dependabot.{yml,yaml}".into()),
+            },
         ];
 
         // Register our capabilities with the client.