Skip to content

Commit 40cd161

Browse files
🩹[Patch]: Update dependabot schedule and pin actions to SHA (#19)
Dependabot now checks for updates daily with a 7-day cooldown period, reducing noise while maintaining timely security updates. All GitHub Actions are pinned to specific commit SHAs with version comments for enhanced security and reproducibility. ## Dependabot Configuration Updated the schedule from `weekly` to `daily` with a `cooldown` of 7 days. This means Dependabot will check for updates daily but will wait 7 days after a new version is released before creating a PR, helping to avoid early adoption of potentially unstable releases. ```yaml schedule: interval: daily cooldown: default-days: 7 ``` ## Pinned Actions All actions are now pinned to specific commit SHAs with version tag comments for traceability: | Action | Version | Commit SHA | |--------|---------|------------| | `actions/checkout` | v6.0.1 | `8e8c483db84b4bee98b60c0593521ed34d9990e8` | | `super-linter/super-linter` | v8.3.2 | `d5b0a2ab116623730dd094f15ddc1b6b25bf7b99` | | `PSModule/Auto-Release` | v1.9.5 | `eabd533035e2cb9822160f26f2eda584bd012356` |
1 parent 82045fd commit 40cd161

3 files changed

Lines changed: 4 additions & 3 deletions

File tree

.github/dependabot.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@
55

66
version: 2
77
updates:
8-
- package-ecosystem: github-actions # See documentation for possible values
9-
directory: / # Location of package manifests
8+
- package-ecosystem: github-actions
9+
directory: /
1010
labels:
1111
- dependencies
1212
- github-actions

.github/workflows/Auto-Release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,4 +31,4 @@ jobs:
3131
persist-credentials: false
3232

3333
- name: Auto-Release
34-
uses: PSModule/Auto-Release@eabd533035e2cb9822160f26f2eda584bd012356 # v1
34+
uses: PSModule/Auto-Release@eabd533035e2cb9822160f26f2eda584bd012356 # v1.9.5

.github/workflows/Linter.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,7 @@ jobs:
2929
env:
3030
GITHUB_TOKEN: ${{ github.token }}
3131
VALIDATE_BIOME_FORMAT: false
32+
VALIDATE_JSCPD: false
3233
VALIDATE_JSON_PRETTIER: false
3334
VALIDATE_MARKDOWN_PRETTIER: false
3435
VALIDATE_YAML_PRETTIER: false

0 commit comments

Comments
 (0)