Skip to content

Dependabot configuration to update actions in workflows #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ScottBrenner wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Dependabot configuration to update actions in workflows #2

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
version: 2
updates:
# Enable version updates for GitHub Actions
- package-ecosystem: "github-actions"
# Look for GitHub Actions workflows in the `root` directory
directory: "/"
# Check for updates once a week
schedule:
interval: "weekly"
Comment on lines +1 to +9
Copy link

@coderabbitai coderabbitai bot Dec 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick | 🔵 Trivial

Well-configured Dependabot setup for GitHub Actions.

The configuration is correctly formatted and successfully enables automatic dependency updates for GitHub Actions. The weekly schedule is a sensible default for most projects.

For future iterations, consider adding optional fields (e.g., assignees, reviewers, pull-request-branch-name) to better align the auto-generated pull requests with your project's review and assignment workflows.

🤖 Prompt for AI Agents 
.github/dependabot.yml lines 1-9: add optional Dependabot fields to the existing
github-actions update entry to auto-assign and route PRs into your review
workflow—specifically add an assignees list, a reviewers list (or team), and a
pull-request-branch-name pattern under the github-actions package-ecosystem
block so Dependabot-created PRs are assigned to the right people/teams and use a
predictable branch name; keep the weekly schedule and ensure names match your
repo's users/teams.