Skip to content

Commit 869cb97

Browse files
committed
Update comments in Dependabot config to reflect support for action's GHA dependencies
Originally, Dependabot only provided support for managing the GitHub Actions action dependencies of workflows. The comments in the Dependabot configuration file reflected that situation. Composite actions can now use other actions and Dependabot will also manage those dependencies. The comments are updated accordingly.
1 parent e791977 commit 869cb97

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

.github/dependabot.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,11 @@
22
version: 2
33

44
updates:
5-
# Configure check for outdated GitHub Actions actions in workflows.
5+
# Configure check for outdated GitHub Actions actions in workflows and action metadata.
66
# Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/dependabot/README.md
77
# See: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-actions-up-to-date-with-dependabot
88
- package-ecosystem: github-actions
9-
directory: / # Check the repository's workflows under /.github/workflows/
9+
directory: /
1010
schedule:
1111
interval: daily
1212
labels:

0 commit comments

Comments
 (0)