Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add github-actions configuration for Dependabot #5567

Closed
wants to merge 2 commits into from

Conversation

ntwb
Copy link
Member

@ntwb ntwb commented Sep 28, 2021

With various updates to Dependabot coming in Stylelint projects, this might be helpful in ensuring the GitHub Actions we use are updated when new releases are released. I suspect this would be most valuable if a security release of a GitHub Action is released we'd get a PR for it relatively quickly.

Which issue, if any, is this issue related to?

None, as it's a build tooling update.

Is there anything in the PR that needs further explanation?

No, it's self-explanatory.

Copy link
Member

@ybiquitous ybiquitous left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agree! 👍🏼

@ybiquitous
Copy link
Member

Oh, the base branch is master not v14, is it OK?

@ybiquitous
Copy link
Member

Oh, the base branch is master not v14, is it OK?

Sorry, the base branch must be master 😅 (#5453)

@ntwb
Copy link
Member Author

ntwb commented Sep 28, 2021

This should be fine to go into either v14 or master, so now or later, no strong opinion on where.

Feel free to re-base against v14 if that would be more appropriate

.github/dependabot.yml Outdated Show resolved Hide resolved
@XhmikosR
Copy link
Member

XhmikosR commented Oct 6, 2021

FYI If you use the actions' tags (which IIRC we do here), like actions/setup-node@v2, you will automatically get any security fixes. :)

@ybiquitous
Copy link
Member

When I've merged the main branch into this PR branch, the file changes have dismissed.
I forgot about PR #5482. 😅

@ybiquitous
Copy link
Member

This PR seems no longer necessary. Could you close it, please? @ntwb

@jeddy3 jeddy3 closed this Oct 25, 2021
@jeddy3 jeddy3 deleted the dependabot-github-actions branch October 25, 2021 15:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants