Skip to content

Add Dependabot for automated GitHub Actions version tracking#14

Merged
pappasjfed merged 1 commit into
mainfrom
copilot/update-workflows-and-add-dependabot
Apr 8, 2026
Merged

Add Dependabot for automated GitHub Actions version tracking#14
pappasjfed merged 1 commit into
mainfrom
copilot/update-workflows-and-add-dependabot

Conversation

Copilot AI commented Apr 8, 2026

Copy link
Copy Markdown
Contributor

All GitHub Actions across the six workflow files were already on their latest major versions. Added Dependabot configuration to automate future version tracking so actions don't drift behind.

Changes

  • .github/dependabot.yml — new file enabling weekly Dependabot PRs for github-actions ecosystem, scanning from the repo root
version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"

Actions audited (all current)

Action Version
actions/checkout v6 (latest: v6.0.2)
actions/cache v5 (latest: v5.0.4)
actions/upload-artifact v7 (latest: v7.0.0)
actions/download-artifact v8 (latest: v8.0.1)
graalvm/setup-graalvm v1 (latest: v1.5.2)
ilammy/msvc-dev-cmd v1 (latest: v1.13.0)
docker/login-action v4 (latest: v4.1.0)
docker/setup-buildx-action v4 (latest: v4.0.0)
docker/build-push-action v7 (latest: v7.0.0)
softprops/action-gh-release v2 (latest: v2.6.1)

@pappasjfed pappasjfed marked this pull request as ready for review April 8, 2026 22:55
@pappasjfed pappasjfed merged commit 58ae069 into main Apr 8, 2026
6 checks passed
@pappasjfed pappasjfed deleted the copilot/update-workflows-and-add-dependabot branch April 8, 2026 23:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants