Files
pwap/.github/dependabot.yml
T
SatoshiQaziMuhammed 44f8e3d418 ci: let Dependabot keep the pinned workflow actions current (#52)
The actions are pinned to commit SHAs, and nothing proposes updates to
them: the Node 20 runtime several of them still declare is already being
forced to Node 24, with a warning on every run. Dependabot now checks them
monthly and groups all action updates into one pull request.
2026-10-09 07:12:54 +04:00

14 lines
352 B
YAML

version: 2
updates:
# Workflow actions are pinned to commit SHAs; this keeps the pins current
# (new releases, runtime moves such as Node 20 -> 24) in one PR a month.
- package-ecosystem: github-actions
directory: /
schedule:
interval: monthly
groups:
actions:
patterns: ["*"]
commit-message:
prefix: ci