Skip to content

ci: update GitHub Actions and add Dependabot#2

Merged
stefan-jansen merged 1 commit intomainfrom
chore/update-github-actions-and-dependabot
Apr 30, 2026
Merged

ci: update GitHub Actions and add Dependabot#2
stefan-jansen merged 1 commit intomainfrom
chore/update-github-actions-and-dependabot

Conversation

@stefan-jansen
Copy link
Copy Markdown
Contributor

Summary

  • update GitHub Actions references to current upstream releases
  • add a shared Dependabot config for github-actions and pip updates
  • standardize workflow dependency maintenance across the repo

Updated actions

  • actions/checkout -> v6.0.2
  • astral-sh/setup-uv -> v8.1.0
  • actions/upload-artifact -> v7.0.1
  • actions/download-artifact -> v8.0.1
  • pypa/gh-action-pypi-publish -> v1.14.0
  • cpina/github-action-push-to-another-repository -> v1.7.3
  • codecov/codecov-action -> v6.0.0 (where used)

Validation

  • actionlint .github/workflows/*.yml
  • git diff --check

Copilot AI review requested due to automatic review settings April 30, 2026 15:20
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates CI/release automation maintenance by bumping GitHub Actions versions across workflows and introducing a shared Dependabot configuration to keep workflow and Python dependencies up to date.

Changes:

  • Bump referenced GitHub Actions versions in CI, docs, and release workflows.
  • Add .github/dependabot.yml to enable weekly grouped updates for github-actions and pip.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File Description
.github/workflows/release.yml Updates action versions used for build/publish/release jobs.
.github/workflows/docs.yml Updates action versions used for docs build and deploy.
.github/workflows/ci.yml Updates action versions used across lint/typecheck/test/build jobs.
.github/dependabot.yml Adds Dependabot config for grouped weekly updates for GitHub Actions and pip dependencies.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/dependabot.yml
Comment on lines +21 to +37
- package-ecosystem: "pip"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "06:15"
timezone: "America/New_York"
open-pull-requests-limit: 10
labels:
- "dependencies"
- "python"
commit-message:
prefix: "deps"
groups:
python-dependencies:
patterns:
- "*"
Comment thread .github/dependabot.yml
Comment on lines +1 to +9
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "monday"
time: "06:00"
timezone: "America/New_York"
@stefan-jansen stefan-jansen merged commit 4b55200 into main Apr 30, 2026
10 checks passed
@stefan-jansen stefan-jansen deleted the chore/update-github-actions-and-dependabot branch April 30, 2026 15:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants