Keep GitHub Actions up to date with GitHub's Dependabot - #28
Conversation
* [Keeping your software supply chain secure with Dependabot](https://docs.github.com/en/code-security/dependabot) * [Keeping your actions up to date with Dependabot](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot) * [Configuration options for the `dependabot.yml` file - package-ecosystem](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem) To see all GitHub Actions dependencies, type: % `git grep 'uses: ' .github/workflows/`
There was a problem hiding this comment.
Pull request overview
This PR adds Dependabot configuration to automatically keep GitHub Actions dependencies up to date. The configuration will create weekly pull requests to update actions like actions/checkout and actions/setup-python currently used in the repository's workflows.
- Adds
.github/dependabot.ymlconfiguration file for GitHub Actions dependency management - Configures weekly automated update checks for all GitHub Actions
- Groups all Actions updates into a single pull request for easier management
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| @@ -0,0 +1,13 @@ | |||
| # Keep GitHub Actions up to date with GitHub's Dependabot... | |||
There was a problem hiding this comment.
The comment has trailing ellipsis ("...") which appears incomplete. Consider removing the ellipsis for cleaner documentation.
| # Keep GitHub Actions up to date with GitHub's Dependabot... | |
| # Keep GitHub Actions up to date with GitHub's Dependabot. |
dependabot.ymlfile - package-ecosystemTo see all GitHub Actions dependencies, type:
%
git grep 'uses: ' .github/workflows/What this does
Explain what this PR does. Feel free to tag your PR with the appropriate label(s).
Examples:
How it was tested
Explain or show how you tested your changes.
Examples:
test_somethingintests/test_components.py.new_featureand verified it runs withpython -m beavr.teleop.main.some_function, confirmed it now runs X% faster.--robot_name=xarm7and confirmed it saves in the right format.How to checkout & try? (for the reviewer)
Provide a simple way for the reviewer to try out your changes.
Examples:
SECTION TO REMOVE BEFORE SUBMITTING YOUR PR
Note: Anyone in the community is free to review the PR once the tests have passed. Feel free to tag
members/contributors who may be interested in your PR. Try to avoid tagging more than 3 people.
Note: Before submitting this PR, please read the contributing guidelines