Skip to content

Commit 2dadc2a

Browse files
committed
Add dependabot for github workflows
This will alert of outdated actions used in our workflows. Does not make much sense for the generated `haskell-ci.yml` workflow, as accepted action version bumps do not survive regeneration. Makes sense for the other workflow(s) though.
1 parent e907996 commit 2dadc2a

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

.github/dependabot.yml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
# From:
2+
# - https://github.com/rhysd/actionlint/issues/228#issuecomment-1272493095
3+
# - https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
4+
5+
# Set update schedule for GitHub Actions
6+
7+
version: 2
8+
updates:
9+
10+
- package-ecosystem: "github-actions"
11+
directory: "/"
12+
schedule:
13+
# Check for updates to GitHub Actions every week
14+
interval: "weekly"

0 commit comments

Comments
 (0)