From a5d9d5c351faf7350807094377f3d20e3014a7cd Mon Sep 17 00:00:00 2001 From: andy5995 Date: Fri, 9 Feb 2024 07:05:30 -0600 Subject: [PATCH] Add dependabot.yml This will cause dependabot to open PRs to bump any actions, such as "checkout" when never major versions are released. https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000000..a0a49d6109 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +# Before applying suggested PRs, make sure that the new versions of any +# updated actions are allowed in +# https://github.com/organizations/geany/settings/actions +# Versions are pinned and restricted for security reasons. +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly"