Commit 40cd161
authored
🩹[Patch]: Update dependabot schedule and pin actions to SHA (#19)
Dependabot now checks for updates daily with a 7-day cooldown period,
reducing noise while maintaining timely security updates. All GitHub
Actions are pinned to specific commit SHAs with version comments for
enhanced security and reproducibility.
## Dependabot Configuration
Updated the schedule from `weekly` to `daily` with a `cooldown` of 7
days. This means Dependabot will check for updates daily but will wait 7
days after a new version is released before creating a PR, helping to
avoid early adoption of potentially unstable releases.
```yaml
schedule:
interval: daily
cooldown:
default-days: 7
```
## Pinned Actions
All actions are now pinned to specific commit SHAs with version tag
comments for traceability:
| Action | Version | Commit SHA |
|--------|---------|------------|
| `actions/checkout` | v6.0.1 |
`8e8c483db84b4bee98b60c0593521ed34d9990e8` |
| `super-linter/super-linter` | v8.3.2 |
`d5b0a2ab116623730dd094f15ddc1b6b25bf7b99` |
| `PSModule/Auto-Release` | v1.9.5 |
`eabd533035e2cb9822160f26f2eda584bd012356` |1 parent 82045fd commit 40cd161
3 files changed
Lines changed: 4 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
9 | | - | |
| 8 | + | |
| 9 | + | |
10 | 10 | | |
11 | 11 | | |
12 | 12 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
31 | 31 | | |
32 | 32 | | |
33 | 33 | | |
34 | | - | |
| 34 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
29 | 29 | | |
30 | 30 | | |
31 | 31 | | |
| 32 | + | |
32 | 33 | | |
33 | 34 | | |
34 | 35 | | |
0 commit comments