From d2ffb87cda0bed3e48c712fd678c87e06af9d880 Mon Sep 17 00:00:00 2001 From: Chris Bandy Date: Sun, 7 Jun 2026 13:31:13 -0500 Subject: [PATCH] Configure dependabot to update GitHub Actions Workflow runs are currently annotated with the following warning: Node.js 20 actions are deprecated. Rather than figure this out once manually, let GitHub's tools handle it on a regular schedule. --- .github/dependabot.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..7269a0598 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,24 @@ +# documentation: https://docs.github.com/code-security/dependabot/dependabot-version-updates +# schema documentation: https://docs.github.com/code-security/dependabot/working-with-dependabot/dependabot-options-reference +# $schema: https://json.schemastore.org/dependabot-2.0.json +--- +version: 2 +updates: + - package-ecosystem: github-actions + directory: "/" # "/" is a special case that includes ".github/workflows" + registries: "*" + schedule: + interval: weekly + day: tuesday + labels: + - deps + groups: + # Group security updates into one pull request + action-vulnerabilities: + applies-to: security-updates + patterns: ["*"] + + # Group version updates into one pull request + github-actions: + applies-to: version-updates + patterns: ["*"]