From 8957763c1c9f7d58900952a8d564125fc18c1512 Mon Sep 17 00:00:00 2001 From: Zoltan Csizmadia Date: Sun, 13 Sep 2026 23:16:26 -0500 Subject: [PATCH] ci: watch the CI actions with Dependabot (wslkit/skrog#294) Actions only: this is a composite action driving PowerShell, with no package manager and no lockfile. The Skrog version it installs is not a dependency -- it defaults to "latest" and is resolved from the release API at run time, or pinned by the calling workflow. --- .github/dependabot.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..6ce825c --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,15 @@ +# Dependabot for the CI actions (wslkit/skrog#294). +# +# Actions only: this repository is a composite action driving PowerShell, with +# no package manager and no lockfile. The Skrog version it installs is not a +# dependency either -- it defaults to "latest" and is resolved from the release +# API at run time, or pinned by the caller's workflow. +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + labels: [dependencies] + commit-message: + prefix: ci