Skip to content

Configure Dependabot for GitHub Actions - #636

Merged
Brandon Waterloo [MSFT] (bwateratmsft) merged 1 commit into
mainfrom
bwateratmsft-pin-actions-to-shas
Oct 15, 2026
Merged

Brandon Waterloo [MSFT] (bwateratmsft) merged 1 commit into
mainfrom
bwateratmsft-pin-actions-to-shas

Conversation

@bwateratmsft

Copy link
Copy Markdown
Collaborator

🤖

Summary

  • configure weekly grouped Dependabot updates for GitHub Actions in the repository root
  • apply a seven-day default cooldown
  • leave the existing job-level reusable workflow references unchanged; the repository has no external step-level action references to pin

Validation

  • parsed .github/dependabot.yml and verified the requested values
  • validated the configuration against the published SchemaStore Dependabot schema
  • ran git diff --check

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 5b89c3dc-4fd2-4962-af21-e6f59962bc60

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

No blocking findings remain, but repository guidance reserves approval for a human maintainer.

0 open findings

What changed in this PR

Adds Dependabot configuration to manage the repository’s GitHub Actions dependencies.

Changes:

  • Schedules weekly updates grouped together.
  • Sets a seven-day default cooldown.
  • Leaves existing reusable workflow references unchanged.
File Description
.github/​dependabot.yml Configures weekly grouped GitHub Actions updates with a seven-day cooldown.

🧠 Review effort: Balanced


💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@bwateratmsft
Brandon Waterloo [MSFT] (bwateratmsft) merged commit 57cf19f into main Oct 15, 2026
3 checks passed
@bwateratmsft
Brandon Waterloo [MSFT] (bwateratmsft) deleted the bwateratmsft-pin-actions-to-shas branch October 15, 2026 17:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants