Commit graph

3 commits

Author SHA1 Message Date
Justin Mayer
ff4460c3d7 Limit Dependabot scope to GitHub Actions only
Sometimes we intentionally pin specific package versions -- such as for
Pygments, Jinja2, and Markdown -- and thus automated Dependabot PRs for
those packages are spurious and unwanted.
2025-07-01 09:31:01 +02:00
Sean Hammond
dc40474e29
Use Dependabot to keep GitHub Actions up to date
Configure Dependabot to send automated PRs to update the version numbers
in `.github/workflows/*.yml` when new versions of actions are released.

See:

https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
2024-06-17 12:39:07 +01:00
boxydog
8c7c29e4f2
Add dependabot checking (#5) 2024-06-02 14:03:56 -05:00