diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 68be1d8a5a..dd7c872c5a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -16,7 +16,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 groups: github: patterns: @@ -28,7 +28,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 groups: aws: patterns: @@ -65,7 +65,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 labels: - "dependencies" - "docker" @@ -81,7 +81,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 labels: - "dependencies" - "docker" @@ -97,7 +97,7 @@ updates: schedule: interval: "weekly" cooldown: - default-days: 5 + default-days: 7 groups: python-deps: patterns: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2e449cfef7..f122b6420c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -3,7 +3,6 @@ on: push: branches: - main - - v1 workflow_dispatch: concurrency: @@ -22,6 +21,7 @@ jobs: actions: write # for release-please-action to trigger other workflows id-token: write # for actions/attest-build-provenance to generate attestations attestations: write # for actions/attest-build-provenance to write attestations + environment: release steps: - name: Harden the runner (Audit all outbound calls) uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0