Skip to content

Conversation

@Mrtenz
Copy link
Member

@Mrtenz Mrtenz commented Oct 31, 2025

Explanation

This adds actions/* and MetaMask/* to the Dependabot config, ensuring we keep these actions up to date as well. I've limited it to these two, since we do use some other actions which are usually pinned to a specific hash, and require explicit approval to be used first.

References

MetaMask/metamask-module-template#274

Checklist

  • I've updated the test suite for new or updated code as appropriate
  • I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
  • I've communicated my changes to consumers by updating changelogs for packages I've changed, highlighting breaking changes as necessary
  • I've prepared draft pull requests for clients and consumer packages to resolve any breaking changes

Note

Adds Dependabot config for GitHub Actions with daily 06:00 runs on main, allowing MetaMask/* and actions/*, and capping open PRs at 10.

  • Dependabot configuration:
    • GitHub Actions updates: Add package-ecosystem: github-actions with daily schedule at 06:00, targeting main.
      • Allow only MetaMask/* and actions/*.
      • Set open-pull-requests-limit to 10.

Written by Cursor Bugbot for commit 92188fd. This will update automatically on new commits. Configure here.

@Mrtenz Mrtenz requested a review from a team as a code owner October 31, 2025 09:11
@@ -1,5 +1,5 @@
# Please see the documentation for all configuration options:
# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This link is broken.

@Mrtenz Mrtenz force-pushed the mrtenz/dependabot-actions branch from 69fe95f to 92188fd Compare October 31, 2025 09:11
Copy link
Contributor

@cryptodev-2s cryptodev-2s left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@Mrtenz Mrtenz merged commit cf64040 into main Oct 31, 2025
259 checks passed
@Mrtenz Mrtenz deleted the mrtenz/dependabot-actions branch October 31, 2025 13:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants