fix: update github workflows #18
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
There was a problem hiding this comment.
Pull request overview
This PR modernizes GitHub workflows by adding automation for dependency management and updating action versions with security improvements. The changes include adding automated pre-commit hook updates, configuring Dependabot for Go modules and GitHub Actions, setting up code ownership, and updating the release workflow with newer action versions and enhanced security.
Key changes:
- Added pre-commit auto-updater workflow running daily to keep hooks current
- Configured Dependabot for automated Go module and GitHub Actions updates
- Updated release workflow with pinned action commits, Go 1.24, and persist-credentials: false for security
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
.github/workflows/release.yaml |
Updated action versions to v6, pinned commits with SHA hashes, upgraded Go to 1.24, added persist-credentials: false |
.github/workflows/pre-commit-auto-update.yaml |
New workflow for daily automated pre-commit hook updates with SHA-pinned action |
.github/dependabot.yaml |
New configuration for weekly Go module and GitHub Actions dependency updates with grouping |
.github/CODEOWNERS |
New file designating @soderluk as code owner |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
soderluk
force-pushed
the
feat/update-workflows
branch
2 times, most recently
from
950a999 to
8e51d22
Compare
soderluk
force-pushed
the
feat/update-workflows
branch
from
8e51d22 to
dbcea09
Compare
Add pre-commit auto updater, add CODEOWNERS file. Add dependabot configuration. Update the go version and action versions in release workflow.
soderluk
force-pushed
the
feat/update-workflows
branch
from
dbcea09 to
16393bc
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Add pre-commit auto updater, add CODEOWNERS file.
Add dependabot configuration.
Update the go version and action versions in release workflow.