From e2d17db8fb89ea0754077c63f746f4955b35ea5a Mon Sep 17 00:00:00 2001 From: Anton Volkov Date: Tue, 14 Oct 2025 11:27:21 -0500 Subject: [PATCH 1/4] Add dependabot --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..7863596 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,8 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "saturday" + rebase-strategy: "disabled" From 50fe65561fa6706750c1bde995c29e8ac456aeab Mon Sep 17 00:00:00 2001 From: Anton Volkov Date: Tue, 14 Oct 2025 11:32:17 -0500 Subject: [PATCH 2/4] Run pre-commit workflow with the latest runner, because ubuntu-20.04 is obsolete --- .github/workflows/pre-commit.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index a2c1c65..b1cf0a7 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -13,7 +13,7 @@ on: jobs: pre-commit: - runs-on: ubuntu-20.04 + runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 - uses: actions/setup-python@v2 From 5c793fd6cb3e7f0e1cec6301a42fc3dccb8c92cb Mon Sep 17 00:00:00 2001 From: Anton Volkov Date: Tue, 14 Oct 2025 11:34:18 -0500 Subject: [PATCH 3/4] Bump the version of github actions used by pre-commit workflow --- .github/workflows/pre-commit.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index b1cf0a7..d30c2b0 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -15,6 +15,6 @@ jobs: pre-commit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v2 - - uses: pre-commit/action@v2.0.0 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0 + - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1 From b8ab8aeff79aaa7adeaf324dc9c457ed79611ec9 Mon Sep 17 00:00:00 2001 From: Anton Volkov Date: Tue, 14 Oct 2025 11:56:05 -0500 Subject: [PATCH 4/4] Add SPDX headers to dependabot.yml --- .github/dependabot.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 7863596..fec9a07 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,3 +1,7 @@ +# SPDX-FileCopyrightText: 2025 Intel Corporation +# +# SPDX-License-Identifier: Apache-2.0 + version: 2 updates: - package-ecosystem: "github-actions"