Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use dependabot to upgrade gh-actions versions #2296

Closed
adinauer opened this issue Oct 14, 2022 · 5 comments · Fixed by #2331
Closed

Use dependabot to upgrade gh-actions versions #2296

adinauer opened this issue Oct 14, 2022 · 5 comments · Fixed by #2331

Comments

@adinauer
Copy link
Member

adinauer commented Oct 14, 2022

Description

We should use dependabot to track gh-actions version changes and update them automatically. Prior art: https://github.com/getsentry/sentry-react-native/blob/main/.github/dependabot.yml

@adinauer adinauer changed the title Update setup-java action Update setup-java GitHub action Oct 14, 2022
@philipphofmann
Copy link
Member

philipphofmann commented Oct 17, 2022

@adinauer, are you referring to warnings similar to
Screen Shot 2022-10-17 at 16 33 09

We also have them on Cocoa, see https://github.com/getsentry/sentry-cocoa/actions/runs/3248326856 or https://github.com/getsentry/sentry-cocoa/actions/runs/3262681695.

@markushi
Copy link
Member

@philipphofmann yes, those are the ones we see for Java too.

@markushi
Copy link
Member

Revisit this once the github-action has been updated.

@romtsn
Copy link
Member

romtsn commented Nov 2, 2022

We should use dependabot so it automatically updates the gh-actions whenever there are new releases.

@romtsn romtsn changed the title Update setup-java GitHub action Use dependabot to upgrade gh-actions versions Nov 2, 2022
@philipphofmann
Copy link
Member

I think you only need to add

- package-ecosystem: "github-actions"
  directory: "/"
  schedule:
      interval: weekly

to the dependabot.yml.

We already have this for Cocoa.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Archived in project
Development

Successfully merging a pull request may close this issue.

4 participants