Pinning the codespell version is great, but auto-updates and follow-up releases would be needed to not keep users in the past

[hartwork]

Hi! 👋

Commit 710c0e8 started pinning the version of codespell being installed, which is great for robustness and security 👍 👍 However it keeps users in the past — currently missing out on improvements from codespell 2.4.3 — unless the pin is being follow-up by…

• making GitHub Dependabot send pull requests for requirements.txt and
• creating new releases of the action after merging the PyPI bump.

Thanks for your consideration! 🙏

CC @LotemKahana @yarikoptic

[larsoner]

Agreed, would you be up for a quick PR to make Dependabot run at least?

[hartwork]

@larsoner yes, coming up…

[hartwork]

Here you go: #108 🍻

[larsoner]

Okay release cut... that'll still be manual but this is at least some progress

[hartwork]

@larsoner very cool, thanks for the release and the quick reaction! PS: Maybe it doesn't need full-blown auto-release automation.