From 08205ff6773c3dddfa14e7624c83f5ac3e9747c7 Mon Sep 17 00:00:00 2001 From: "Peter A. Jonsson" Date: Sat, 30 Mar 2024 13:38:16 +0100 Subject: [PATCH] Add Dependabot for Github actions Dependabot will submit pull requests when packages get new versions released. After merging this, Dependabot should open pull requests that resolve the warnings for the workflows in the actions tab, as seen here for example: https://github.com/TerriaJS/TerriaMap/actions/runs/8150265114 Link to Dependabot documentation: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot --- .github/dependabot.yml | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..fb4226620 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,7 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: "/" + schedule: + interval: "daily" + target-branch: "main"