-
Notifications
You must be signed in to change notification settings - Fork 2
🩹[Patch]: Configure Dependabot for daily schedule with 7-day cooldown #88
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR aims to configure Dependabot to check for updates daily while introducing a 7-day cooldown period before applying updates. However, the PR includes several changes beyond the described scope, including GitHub Actions version updates and deletion of a release configuration file.
Changes:
- Modified Dependabot schedule from weekly to daily with an added cooldown configuration
- Updated actions/checkout references to v6.0.2 with commit SHA pinning
- Updated super-linter/super-linter reference to v8.3.2 with commit SHA pinning
- Deleted .github/release.yml file
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| .github/dependabot.yml | Changed schedule interval to daily and added cooldown configuration with 7-day default |
| .github/workflows/Linter.yml | Pinned actions/checkout to v6.0.2 and super-linter to v8.3.2 using commit SHAs |
| .github/workflows/Auto-Release.yml | Pinned actions/checkout to v6.0.2 using commit SHA |
| .github/workflows/Action-Test.yml | Pinned actions/checkout to v6.0.2 using commit SHA |
| .github/release.yml | Deleted GitHub automatic release notes configuration |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
…ay cooldown; update workflow trigger from pull_request_target to pull_request
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 6 out of 6 changed files in this pull request and generated 3 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 6 out of 7 changed files in this pull request and generated 1 comment.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Summary
Configures Dependabot for daily update checking with a 7-day cooldown period and pins GitHub Actions to specific commit SHAs for improved security and reproducibility.
Changes
Dependabot Configuration
weeklytodailyforgithub-actionspackage ecosystemnugetpackage ecosystem (not used in this repository)Workflow Improvements
actions/checkoutto commit SHAde0fac2e4500dabe0009e67214ff5f5447ce83dd(v6.0.2)super-linter/super-linterto commit SHAd5b0a2ab116623730dd094f15ddc1b6b25bf7b99(v8.3.2)PSModule/GitHub-Scriptto commit SHAe827bea46d70eebc668bdd59e4654e0846177da4(v1.7.9)pull_request_targettopull_requestin Auto-Release workflowVALIDATE_BIOME_FORMATin linter configurationCleanup
.github/release.ymlconfiguration fileDocumentation