From aeb9714d1f7aac32b996eaf13c9f5efa12ee41ae Mon Sep 17 00:00:00 2001 From: Jan Harrie Date: Thu, 22 May 2025 09:32:38 +0200 Subject: [PATCH 1/2] configure dependabot to automatically update GitHub Actions dependencies --- .github/dependabot.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 09ce6c9a..778a1b25 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,5 +10,3 @@ updates: directory: "/" schedule: interval: "daily" - allow: - - dependency-name: "hashicorp/*" From b0b6b88961d2f32e93e5bf4179f70198e595021a Mon Sep 17 00:00:00 2001 From: Jan Harrie Date: Mon, 26 May 2025 07:48:46 +0200 Subject: [PATCH 2/2] remove comment and grouped prs --- .github/dependabot.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 778a1b25..97a5dfab 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,8 +5,15 @@ updates: schedule: interval: "daily" labels: ["dependencies"] - # Dependabot only updates hashicorp GHAs, external GHAs are managed by internal tooling (tsccr) - package-ecosystem: "github-actions" directory: "/" schedule: interval: "daily" + groups: + github-actions-breaking: + update-types: + - major + github-actions-backward-compatible: + update-types: + - minor + - patch