Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable Dependabot updates for GitHub Actions #99

Merged
merged 1 commit into from
Sep 24, 2024

Conversation

d33bs
Copy link
Member

@d33bs d33bs commented Sep 24, 2024

Description

This PR enables Dependabot, an automated agent provided for free from GitHub, to automatically check and update on a weekly basis GitHub Actions used by this project. GitHub Actions versions quickly become out of date, incurring security, performance, or other issues for projects. This is a preventative measure to help keep the project in good health.

Note: these updates are performed in isolation from Dependabot security-focused updates, which are configured from GitHub settings for the repository.

What kind of change(s) are included?

  • Documentation (changes docs or other related content)
  • Bug fix (fixes an issue).
  • Enhancement (adds functionality).
  • Breaking change (these changes would cause existing functionality to not work as expected).

Checklist

Please ensure that all boxes are checked before indicating that this pull request is ready for review.

  • I have read and followed the CONTRIBUTING.md guidelines.
  • I have searched for existing content to ensure this is not a duplicate.
  • I have performed a self-review of these additions (including spelling, grammar, and related).
  • These changes pass all pre-commit checks.
  • I have added comments to my code to help provide understanding
  • I have added a test which covers the code changes found within this PR
  • I have deleted all non-relevant text in this pull request template.

Copy link
Member

@jenna-tomkinson jenna-tomkinson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! I added one question but otherwise super nice small change!

.github/dependabot.yml Show resolved Hide resolved
@d33bs
Copy link
Member Author

d33bs commented Sep 24, 2024

Thanks @jenna-tomkinson ! Merging this in after responding to your comment.

@d33bs d33bs merged commit bd8c623 into WayScience:main Sep 24, 2024
9 checks passed
@d33bs d33bs deleted the dependabot-for-gh-actions branch September 24, 2024 19:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants