Skip to content

CI: update actions/checkout to v7, add Dependabot - #1

Merged
patrick-creates merged 1 commit into
mainfrom
claude/ci-deps-security
Nov 3, 2026
Merged

patrick-creates merged 1 commit into
mainfrom
claude/ci-deps-security

Conversation

@patrick-creates

Copy link
Copy Markdown
Owner

Summary

  • actions/checkout v4 -> v7 (Node 24) in test.yml, the sync_docs.yml template and the README example.
  • Dependabot version updates for GitHub Actions, monthly and grouped.

Validation

  • nlm_auth.py compiles; all changed YAML files parse. tests/test_sync.sh was not run locally (no jq here); CI on this PR runs it.

Limitations

  • Dependabot only watches .github/workflows and action.yml; the sync_docs.yml template and the README example need manual bumps.
  • notebooklm-mcp-cli==0.15.5 is pinned inside action.yml, which Dependabot does not read.
  • Repo settings (Dependabot alerts, security updates) are still off; they are switched in Settings, not in this PR.

- actions/checkout v4 -> v7 (Node 24) in test.yml, sync_docs.yml and the
  README example.
- Dependabot version updates for GitHub Actions, monthly and grouped.
@patrick-creates
patrick-creates merged commit d98fd6b into main Nov 3, 2026
1 check passed
@patrick-creates
patrick-creates deleted the claude/ci-deps-security branch November 3, 2026 22:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant