From 0ce25502a0cdbe5629a78c7ea0301566a4f3da62 Mon Sep 17 00:00:00 2001
From: Bill Little <bill.james.little@gmail.com>
Date: Mon, 30 Sep 2024 17:05:27 +0100
Subject: [PATCH] configure dependabot for github composite actions (#6154)

---
 .github/dependabot.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e5797077df..82ba80c4ff 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,7 +6,9 @@ version: 2
 updates:
 
   - package-ecosystem: "github-actions"
-    directory: "/"
+    directories:
+      - "/"
+      - "/.github/workflows/composite/*"
     schedule:
       # Check later in the week - the upstream dependabot check in `workflows` runs deliberately early in the week.
       #  Therefore allowing time for the `workflows` update to be merged-and-released first.