Files
Matt SturgeonandGaétan Lepage 4b98b6ae9c ci: run dependabot on GitHub Actions
Dependabot can find GHA workflows and actions in standard locations:
- /.github/workflows/*
- /action.yml

But non-standard locations like `.github/actions/**` must be specified
explicitly.
2026-06-07 13:30:13 +00:00

20 lines
845 B
YAML

# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
version: 2
updates:
# Enable version updates for GitHub Actions
- package-ecosystem: "github-actions"
# Workflow files stored in the default location of `.github/workflows`
# You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.
# You _do_ need to specify any non-workflow directories, such as actions, though.
directories:
- /
- /.github/actions/*
schedule:
interval: "weekly"
commit-message:
prefix: "ci"