-
-
Notifications
You must be signed in to change notification settings - Fork 47
Update actions dependencies and enable dependabot #321
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
llucax
commented
Jul 7, 2025
- Update deprecated actions in CI workflow
- Add dependabot configuration to update GitHub Actions
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR updates deprecated GitHub Actions in the CI workflow by pinning them to specific revisions and introduces a Dependabot configuration to keep actions up to date.
- Pin
actions/checkoutandactions/upload-artifactto explicit SHAs with version annotations - Add
.github/dependabot.ymlto automate GitHub Actions dependency updates
Reviewed Changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| .github/workflows/ci.yml | Updated uses references for checkout and upload-artifact steps |
| .github/dependabot.yml | Added Dependabot config for github-actions ecosystem |
Comments suppressed due to low confidence (2)
.github/workflows/ci.yml:8
- Pinning to a long commit SHA can hinder readability and future updates; consider using the official version tag (e.g., actions/checkout@v4) for clarity and maintainability.
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
.github/dependabot.yml:6
- [nitpick] A semiannual update interval may delay critical fixes; consider a more frequent schedule (e.g.,
monthlyorweekly) to keep dependencies current.
interval: "semiannually"
Signed-off-by: Leandro Lucarella <luca-frequenz@llucax.com>
Signed-off-by: Leandro Lucarella <luca-frequenz@llucax.com>
Docutils was removed from Ubuntu. Signed-off-by: Leandro Lucarella <luca-frequenz@llucax.com>
|
Fixed the typo as suggested by copilot, needs a new approval @ibuclaw 🙏 |
|
Or maybe it didn't... |
|
🤷 It's the thought that counts. |