Skip to content

Commit 2943b82

Browse files
committed
Dependabot: attempt to enable for orphan gh-pages branch
Since PR 1156 was merged, the `gh-pages` branch contains a GH Actions workflow to deploy the site and it would be nice if dependencies in that workflow would be kept up to date. The above solution was found via reading up on various discussions about this topic and hopefully _should_ work. There is one caveat though, adding the `target_branch` to each section, means that the configuration in the `dependabot.yml` file will no longer be used for security updates. I'm not too concerned about that as I've yet to see the first security related PR from Dependabot in any of the projects I'm involved with. Ref: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#target-branch-
1 parent dccc53f commit 2943b82

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

.github/dependabot.yml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,12 +5,26 @@
55

66
version: 2
77
updates:
8+
# Handle updates for the default branch.
89
- package-ecosystem: "github-actions"
910
directory: "/"
1011
schedule:
1112
interval: "weekly"
13+
target-branch: "master"
1214
open-pull-requests-limit: 5
1315
commit-message:
1416
prefix: "GH Actions:"
1517
labels:
1618
- "Type: chores/QA"
19+
20+
# Handle updates for the orphan gh-pages branch.
21+
- package-ecosystem: "github-actions"
22+
directory: "/"
23+
schedule:
24+
interval: "weekly"
25+
target-branch: "gh-pages"
26+
open-pull-requests-limit: 5
27+
commit-message:
28+
prefix: "GH Pages/Actions:"
29+
labels:
30+
- "Type: chores/QA"

0 commit comments

Comments
 (0)