From 5350bb6f2ce345fad6eb5c6ba061837b289b116a Mon Sep 17 00:00:00 2001 From: Kyle Mandli Date: Thu, 5 Nov 2026 09:55:06 -0500 Subject: [PATCH] CI: add Dependabot for GitHub Actions Workflows pin action versions; weekly Dependabot PRs keep them current. Same config as clawpack/geoclaw. Signed-off-by: Kyle Mandli Assisted-by: claude claude-opus-5-5 --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..c7a02f19 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + # Keep GitHub Actions pinned in .github/workflows/ up to date. The workflows + # pin exact patch versions (e.g. actions/checkout@v6.0.2), which do not update + # on their own; this raises PRs when newer releases are available. + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 5