Skip to content

ci: add dependabot config for GitHub Actions bumps - #6

Merged
aliasunder merged 1 commit into
mainfrom
ci-dependabot
Sep 3, 2026
Merged

aliasunder merged 1 commit into
mainfrom
ci-dependabot

Conversation

@aliasunder

Copy link
Copy Markdown
Owner

What

Adds .github/dependabot.yml with weekly GitHub Actions version bumps — the github-actions entry from vault-cortex's config.

Why

The repo is gaining pinned-action workflows (umm review in #5, plus the existing release workflows); dependabot keeps the SHA pins current. vault-cortex's npm and docker entries were deliberately not carried over: this repo's package.json declares no dependencies and there is no Dockerfile, so github-actions is the only ecosystem with anything to track.

🤖 Generated with Claude Code

Weekly github-actions updates, matching vault-cortex's entry. The npm
and docker ecosystems were not carried over: package.json declares no
dependencies and there is no Dockerfile.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@aliasunder
aliasunder merged commit 3d3df01 into main Sep 3, 2026
4 checks passed
@aliasunder
aliasunder deleted the ci-dependabot branch September 3, 2026 20:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant