Skip to content

ci(bot): run github actions dependabot updates weekly - #94

Open
samhamilton wants to merge 1 commit into
mainfrom
ci/bot-dependabot-actions-weekly
Open

ci(bot): run github actions dependabot updates weekly#94
samhamilton wants to merge 1 commit into
mainfrom
ci/bot-dependabot-actions-weekly

Conversation

@samhamilton

Copy link
Copy Markdown
Member

No JIRA ticket — automated CI / dependency-management change (bot scope).

Why

The github-actions ecosystem moves from monthly to weekly, so action updates — including
security-relevant ones — land within a week instead of up to a month. Every other ecosystem in this
repo keeps its existing cadence.

Change Type

  • Docs change / refactoring / dependency upgrade
  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Testing

  • actionlint — clean on every changed workflow (only the known custom martide-runner-set label is reported).
  • All changed .yml files parse as YAML.
  • Every SHA in the diff was verified against the upstream tag list via GET /repos/{owner}/{repo}/tags.

Code Quality

  • Added docs
  • Added specs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant