Skip to content

Commit 35216e1

Browse files
authored
Add Dependabot configuration for GitHub Actions updates
Add a Dependabot configuration that checks once a week if the GitHub Actions are still using the latest version. If not, it opens a PR to update them. It will actually open very few PRs, since we only have major versions specified (like v3), so only on a major v4 release it will update and open a PR. See https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
1 parent 65b785b commit 35216e1

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

.github/dependabot.yml

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
version: 2
2+
updates:
3+
# Maintain dependencies for GitHub Actions
4+
- package-ecosystem: "github-actions"
5+
directory: "/"
6+
schedule:
7+
# Check for updates to GitHub Actions every week
8+
interval: "weekly"

0 commit comments

Comments
 (0)