From 3c17de5435556dc15226f819cab449d3521633c3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Javi=20Mart=C3=ADn?= Date: Tue, 2 Jul 2024 21:33:27 +0200 Subject: [PATCH 1/2] Use dependabot to update github actions dependencies This way we don't have to update them manually. --- .github/dependabot.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index b88c4b665..984be4246 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,3 +10,8 @@ updates: schedule: interval: monthly open-pull-requests-limit: 50 +- package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: monthly + open-pull-requests-limit: 50 From 2419084745e45c36b436ee4681b2257a752c1b10 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Javi=20Mart=C3=ADn?= Date: Tue, 2 Jul 2024 21:35:27 +0200 Subject: [PATCH 2/2] Don't add the ruby label to dependabot pull requests The "ruby" label was redundant because most our dependencies are ruby gems. We're still keeping the "javascript" dependencies for npm dependencies, though. --- .github/dependabot.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 984be4246..a51bc4066 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,6 +5,8 @@ updates: schedule: interval: monthly open-pull-requests-limit: 50 + labels: + - "dependencies" - package-ecosystem: npm directory: "/" schedule: