Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a Dependabot config to keep GitHub action versions updated #506

Conversation

kurtmckee
Copy link

GitHub CI runs are throwing deprecation warnings and errors (recent example). This can be fixed by updating the action versions, e.g. updating actions/checkout@v2 to v4.

Rather than updating the actions once, this PR introduces a Dependabot config that will regularly check for new action versions and submit PRs to update the versions.

If this PR merges, you can expect Dependabot to immediately open multiple PRs that target each out-of-date action version.

Thanks for your work on Pyjion!

@tonybaloney tonybaloney merged commit 6e854df into tonybaloney:develop/main Oct 5, 2023
6 of 9 checks passed
@kurtmckee kurtmckee deleted the add-dependabot-for-github-actions branch October 5, 2023 20:42
@kurtmckee
Copy link
Author

@tonybaloney I was surprised that Dependabot didn't immediately open PRs. I found in the docs that an extra step is required for forks:

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates#enabling-version-updates-on-forks

The summary of that page is:

  1. Go to the repo "Settings"
  2. In the "Security" section of the sidebar, click "Code security and analysis"
  3. Under "Code security and analysis", to the right of "Dependabot version updates", click Enable to allow Dependabot to initiate version updates.

Sorry for not documenting that up front in the PR; I wasn't aware of this additional requirement for forks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants