From 68911332804ba2c65dceebb38564af6b46ccc4c4 Mon Sep 17 00:00:00 2001 From: Jan Harrie Date: Thu, 22 May 2025 09:29:32 +0200 Subject: [PATCH 1/2] configure dependabot to automatically update GitHub Actions dependencies --- .github/dependabot.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 09ce6c9a..778a1b25 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,5 +10,3 @@ updates: directory: "/" schedule: interval: "daily" - allow: - - dependency-name: "hashicorp/*" From f851cc843d4d53a833225ce94a666974553e4e1c Mon Sep 17 00:00:00 2001 From: Jan Harrie Date: Mon, 26 May 2025 07:34:23 +0200 Subject: [PATCH 2/2] remove comment and grouped prs --- .github/dependabot.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 778a1b25..97a5dfab 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,8 +5,15 @@ updates: schedule: interval: "daily" labels: ["dependencies"] - # Dependabot only updates hashicorp GHAs, external GHAs are managed by internal tooling (tsccr) - package-ecosystem: "github-actions" directory: "/" schedule: interval: "daily" + groups: + github-actions-breaking: + update-types: + - major + github-actions-backward-compatible: + update-types: + - minor + - patch