From b6cb7335e965c0b69a40dd4d0d13bdfab811e040 Mon Sep 17 00:00:00 2001 From: Kyle Mandli Date: Thu, 5 Nov 2026 09:42:30 -0500 Subject: [PATCH] CI: add Dependabot for GitHub Actions Workflows pin exact action versions (e.g. setup-fortran@v1.11.0); weekly Dependabot PRs keep them current. Same config as clawpack/geoclaw. Signed-off-by: Kyle Mandli Assisted-by: claude claude-opus-5-5 --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..c7a02f1 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + # Keep GitHub Actions pinned in .github/workflows/ up to date. The workflows + # pin exact patch versions (e.g. actions/checkout@v6.0.2), which do not update + # on their own; this raises PRs when newer releases are available. + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 5