From 5afccaf6c886b5c6dc4687804ef17e990f63b2b2 Mon Sep 17 00:00:00 2001 From: Christian Clauss Date: Mon, 11 Mar 2024 19:03:06 +0100 Subject: [PATCH 1/3] Keep GitHub Actions up to date with GitHub's Dependabot * https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot * https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 16a63e27f..2a5958c10 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -19,3 +19,11 @@ updates: - dependency-name: lxml versions: - 4.6.2 +- package-ecosystem: github-actions + directory: / + groups: + github-actions: + patterns: + - "*" # Group all Actions updates into a single larger pull request + schedule: + interval: weekly From 348d3175cf7116b929c1f6f4089a2ec6f499fb56 Mon Sep 17 00:00:00 2001 From: Christian Clauss Date: Mon, 11 Mar 2024 21:20:28 +0100 Subject: [PATCH 2/3] Apply suggestions from code review Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> --- .github/dependabot.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 2a5958c10..b9d5c76f9 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -20,10 +20,10 @@ updates: versions: - 4.6.2 - package-ecosystem: github-actions - directory: / + directory: "/" groups: github-actions: patterns: - "*" # Group all Actions updates into a single larger pull request schedule: - interval: weekly + interval: monthly From 767e9092f19d54c45ef1c75f74dc07f4f282d367 Mon Sep 17 00:00:00 2001 From: Ee Durbin Date: Thu, 18 Apr 2024 10:22:16 -0400 Subject: [PATCH 3/3] Update .github/dependabot.yml --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b9d5c76f9..427010ca9 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -26,4 +26,4 @@ updates: patterns: - "*" # Group all Actions updates into a single larger pull request schedule: - interval: monthly + interval: daily