Skip to content

ci: Add Dependabot configuration for GitHub Actions updates - #4054

Merged
turbobobbytraykov merged 1 commit into
masterfrom
btraykov/dependabot-github-actions
Oct 12, 2026
Merged

turbobobbytraykov merged 1 commit into
masterfrom
btraykov/dependabot-github-actions

Conversation

@turbobobbytraykov

Copy link
Copy Markdown
Contributor

Adds .github/dependabot.yml so Dependabot opens weekly version-update PRs for the GitHub Actions used in this repo's workflows. The file is identical to the reference config.

What the config does:

  • Checks .github/workflows/ every Monday.
  • Only proposes versions released at least 14 days ago (cooldown).
  • Groups all version updates into one PR. Security updates skip the grouping and open their own PRs right away.

This is the setup we prefer for all existing repos in the IgniteUI organization, so GitHub Actions stay up to date even in repos we touch once every few years. A repo can choose a different update strategy (AppBuilder does), and that's fine.

References:

Tracking: IgniteUI/devops-experiments#55

🤖 Generated with Claude Code

Weekly grouped version updates for GitHub Actions with a 14-day
cooldown, identical to igniteui-blazor's .github/dependabot.yml.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@turbobobbytraykov
turbobobbytraykov merged commit fa1e608 into master Oct 12, 2026
7 checks passed
@turbobobbytraykov
turbobobbytraykov deleted the btraykov/dependabot-github-actions branch October 12, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant