From e2a1b43e9e6550edc65db3a34664f401b5985504 Mon Sep 17 00:00:00 2001 From: Jan Harrie Date: Thu, 22 May 2025 09:33:31 +0200 Subject: [PATCH 1/2] configure dependabot to automatically update GitHub Actions dependencies --- .github/dependabot.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 62101d072f..3818576616 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -19,5 +19,3 @@ updates: directory: '/' schedule: interval: 'daily' - allow: - - dependency-name: 'hashicorp/*' From ef998691ba0c59ff8e7145d8d2d53a63ee3158d6 Mon Sep 17 00:00:00 2001 From: Jan Harrie Date: Mon, 26 May 2025 07:51:45 +0200 Subject: [PATCH 2/2] remove comment and grouped prs --- .github/dependabot.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3818576616..940d363c99 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -14,8 +14,15 @@ updates: update-types: ['version-update:semver-minor', 'version-update:semver-patch'] - dependency-name: '@typescript-eslint/*' update-types: ['version-update:semver-minor', 'version-update:semver-patch'] - # Dependabot only updates hashicorp GHAs, external GHAs are managed by internal tooling (tsccr) - package-ecosystem: 'github-actions' directory: '/' schedule: interval: 'daily' + groups: + github-actions-breaking: + update-types: + - major + github-actions-backward-compatible: + update-types: + - minor + - patch