Add a Dependabot config to update GitHub workflow actions #1223
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Several of the actions used in the GitHub workflows are older versions which are throwing deprecation warnings on each run. [example from a recent CI run]
Rather than submit a PR to update the versions, this PR adds a Dependabot configuration that, once merged, will trigger ongoing automatic update PRs from Dependabot. This will keep the action versions updated in perpetuity.
I've read through the contributing document and signed off on the commit, but I may have missed something. Please let me know if anything else is required.
Thanks! Hopefully we'll have a chance to talk at SciPy 2023!