ci: Add Dependabot updates for GitHub Actions #548
Conversation
matthewfeickert
commented
Jan 17, 2025
matthewfeickert
commented
- Enable weekly checks for updates to GitHub Actions in use with Dependabot. Group the updates into a single PR to avoid PR noise.
- Update GitHub Actions to latest versions:
- actions/checkout v3 -> v4
- actions/setup-python v4 -> v5
- astral-sh/setup-uv v3 -> v5
- codecov/codecov-action v3 -> v5
- Remove '3.0_develop' branch as trigger for docs workflow, as it no longer exists.
| schedule: | ||
| interval: "weekly" | ||
| groups: | ||
| actions: | ||
| patterns: | ||
| - "*" |
There was a problem hiding this comment.
This patterns will run the Dependabot workflow on a weekly schedule and will group all updates it finds into 1 PR to avoid noise from multiple updates.
| labels: | ||
| - "github-actions" | ||
| - "dependencies" |
There was a problem hiding this comment.
This will automatically apply these labels to the PRs as well. If these labels don't exist yet it will complain for people to make them, but won't fail.
| reviewers: | ||
| - "BenGalewsky" | ||
| - "ponyisi" |
There was a problem hiding this comment.
This automatically assigns @BenGalewsky and @ponyisi as reviewers. If alternate maintainers should be assigned we can change that.
| @@ -4,7 +4,6 @@ on: | |||
| push: | |||
| branches: | |||
| - main | |||
| - 3.0_develop | |||
There was a problem hiding this comment.
As this branch no longer exists I'm sneaking this cleanup in here too.
|
@BenGalewsky @ponyisi @gordonwatts this is ready for review. Let me know if you have any questions. |
matthewfeickert
force-pushed
the
ci/turn-on-dependabot
branch
from
ddc3efd to
d3afe7c
Compare
* Update GitHub Actions to latest versions: - actions/checkout v3 -> v4 - actions/setup-python v4 -> v5 - astral-sh/setup-uv v3 -> v5 - codecov/codecov-action v3 -> v5 * Remove '3.0_develop' branch as trigger for docs workflow, as it no longer exists.
* Enable weekly checks for updates to GitHub Actions in use with Dependabot. Group the updates into a single PR to avoid PR noise.
matthewfeickert
force-pushed
the
ci/turn-on-dependabot
branch
from
d3afe7c to
0ca9e03
Compare
