-
-
Notifications
You must be signed in to change notification settings - Fork 8.6k
Keep GitHub Actions up to date with GitHub's Dependabot #14728
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Fixes software supply chain safety warnings like at the bottom right of https://github.com/SeleniumHQ/selenium/actions/runs/11738897387 * [Keeping your actions up to date with Dependabot](https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot) * [Configuration options for the dependabot.yml file - package-ecosystem](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem) **Thanks for contributing to Selenium!** **A PR well described will help maintainers to quickly review and merge it** Before submitting your PR, please check our [contributing](https://github.com/SeleniumHQ/selenium/blob/trunk/CONTRIBUTING.md) guidelines. Avoid large PRs, help reviewers by making them as simple and short as possible. <!--- Provide a general summary of your changes in the Title above --> ### Description <!--- Describe your changes in detail --> ### Motivation and Context <!--- Why is this change required? What problem does it solve? --> ### Types of changes <!--- What types of changes does your code introduce? Put an `x` in all the boxes that apply: --> - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Breaking change (fix or feature that would cause existing functionality to change) ### Checklist <!--- Go over all the following points, and put an `x` in all the boxes that apply. --> <!--- If you're unsure about any of these, don't hesitate to ask. We're here to help! --> - [x] I have read the [contributing](https://github.com/SeleniumHQ/selenium/blob/trunk/CONTRIBUTING.md) document. - [ ] My change requires a change to the documentation. - [ ] I have updated the documentation accordingly. - [ ] I have added tests to cover my changes. - [x] All new and existing tests passed. <!--- Provide a general summary of your changes in the Title above -->
PR Reviewer Guide 🔍Here are some key observations to aid the review process:
|
PR Code Suggestions ✨Explore these optional code suggestions:
|
|
We use renovate for dependencies which should be working for actions. If not, then it is probably misconfigured and we appreciate any help to get it working. Thanks! |
|
My experience with renovate is not good. I usually find it not working and difficult to configure. |
|
We've got good results with the default configuration. |
1 similar comment
|
We've got good results with the default configuration. |
|
https://github.com/SeleniumHQ/selenium/actions/runs/11738897387 still contains a lot of warnings. |
User description
Fixes software supply chain safety warnings like at the bottom right of
https://github.com/SeleniumHQ/selenium/actions/runs/11738897387
Thanks for contributing to Selenium!
A PR well described will help maintainers to quickly review and merge it
Before submitting your PR, please check our contributing guidelines. Avoid large PRs, help reviewers by making them as simple and short as possible.
Description
Motivation and Context
Types of changes
Checklist
PR Type
enhancement, configuration changes
Description
.github/dependabot.ymlfile to automate the updating of GitHub Actions using Dependabot.Changes walkthrough 📝
dependabot.yml
Add Dependabot configuration for GitHub Actions updates.github/dependabot.yml
dependabot.ymlconfiguration file.