Skip to content

Add github-actions ecosystem to Dependabot (sync workflow action pins)#204

Merged
Chris-Wolfgang merged 1 commit into
mainfrom
feat/dependabot-github-actions-ecosystem
Jun 19, 2026
Merged

Add github-actions ecosystem to Dependabot (sync workflow action pins)#204
Chris-Wolfgang merged 1 commit into
mainfrom
feat/dependabot-github-actions-ecosystem

Conversation

@Chris-Wolfgang

Copy link
Copy Markdown
Owner

Closes the corresponding "CI/CD: Add the github-actions ecosystem to Dependabot" maintenance issue in this repo.

Summary

Adds the github-actions ecosystem block to .github/dependabot.yml so Dependabot keeps third-party action pins in workflow files up to date (currently it only manages NuGet packages).

Change

Appends the canonical block to dependabot.yml:

  # Keep third-party GitHub Actions pinned in workflows up to date.
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 10
    labels:
      - "dependencies"
    groups:
      github-actions:
        patterns:
          - "*"

Block matches the canonical version live in In-memory-Logger. Weekly schedule + grouped PRs to keep noise low; dependencies label so PRs are filterable.

@Chris-Wolfgang Chris-Wolfgang merged commit 2dcbfe3 into main Jun 19, 2026
9 checks passed
@Chris-Wolfgang Chris-Wolfgang deleted the feat/dependabot-github-actions-ecosystem branch June 19, 2026 20:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant