Merge pull request #81 from avnishsinghh/dependabot

Added dependabot.yml to auto-update GitHub actions
wtsi-npg · Oct 1, 2024 · d0efc79 · d0efc79
2 parents 7b23002 + c319b27
commit d0efc79
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+# Referenced from:
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
+
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/CHANGES b/CHANGES
@@ -5,6 +5,7 @@ CHANGES
  - replace grunt-jsonlint 2.1.3 with @prantlf/grunt-jsonlint 2.2.1
    the original project is not maintained anymore and the new one
    is a maintained fork picked up from snyk. Only used for devel.
+ - Added .github/dependabot.yml file to auto-update GitHub actions
 
 release 1.3.3
  - switch to github actions from travis ci