Skip to content

Keep GitHub Actions pins updated with Dependabot - #1646

Merged
pganssle merged 1 commit into
ci-zizmorfrom
ci-dependabot
Oct 25, 2026
Merged

pganssle merged 1 commit into
ci-zizmorfrom
ci-dependabot

Conversation

@pganssle

@pganssle pganssle commented Oct 25, 2026 •

Copy link
Copy Markdown
Member

Summary of changes

This enables Dependabot updates for the GitHub Actions commit pins. Updates are checked monthly and grouped into a single PR, with at most one version-update PR open at a time, to keep notification noise down. New releases have a seven-day cooldown before they are proposed.

This is stacked on #1645 and revisits #1335.

Pull Request Checklist

  • Changes have tests
  • Authors have been added to AUTHORS.md
  • News fragment added in changelog.d. See CONTRIBUTING.md for details

@pganssle
pganssle added this pull request to stack #1639 October 25, 2026 18:56
Comment thread .github/dependabot.yml Outdated
@pganssle
pganssle marked this pull request as ready for review October 25, 2026 19:12
@pganssle pganssle added the build label Oct 25, 2026
@pganssle
pganssle merged commit 27ecba2 into master Oct 25, 2026
36 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant