Skip to content

v0.3.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Jan 12:12
v0.3.1
ad0ba16
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🩹 [Enhancement]: Update Dependabot schedule and workflow versioning (#17)

Dependabot now checks for GitHub Actions updates daily instead of weekly, with a 7-day cooldown period that prevents noisy update notifications for rapidly iterating dependencies. Additionally, the Process-PSModule workflow reference is now pinned to a specific commit SHA for improved security and reproducibility.

Dependabot daily schedule with cooldown

The dependabot configuration has been updated to use a daily schedule with a 7-day cooldown period. This allows the repository to receive dependency update notifications earlier while filtering out rapid version churns that would otherwise create unnecessary PR noise.

schedule:
  interval: daily
cooldown:
  default-days: 7

Workflow action version pinning

The Process-PSModule reusable workflow is now pinned to commit SHA 7c92b2ff94b965f4eaef272c3f3e0e766cd683f2 with a version comment # v5.4.0. This follows security best practices by:

  • Preventing unexpected behavior from tag mutations
  • Ensuring reproducible workflow runs
  • Making version information visible directly in the workflow file
Assets 2
Loading