.github/dependabot.yml (340B)
1 # Keeps the SHA-pinned actions in .github/workflows current. A pin that is never bumped
2 # stops receiving the action's fixes, so each release arrives as a pull request instead.
3 version: 2
4 updates:
5 - package-ecosystem: github-actions
6 directory: /
7 schedule:
8 interval: weekly
9 groups:
10 actions:
11 patterns: ['*']