Skip to content

Commit ad0ba16

Browse files
🩹 [Enhancement]: Update Dependabot schedule and workflow versioning (#17)
Dependabot now checks for GitHub Actions updates daily instead of weekly, with a 7-day cooldown period that prevents noisy update notifications for rapidly iterating dependencies. Additionally, the Process-PSModule workflow reference is now pinned to a specific commit SHA for improved security and reproducibility. - Fixes #16 ## Dependabot daily schedule with cooldown The dependabot configuration has been updated to use a daily schedule with a 7-day cooldown period. This allows the repository to receive dependency update notifications earlier while filtering out rapid version churns that would otherwise create unnecessary PR noise. ```yaml schedule: interval: daily cooldown: default-days: 7 ``` ## Workflow action version pinning The Process-PSModule reusable workflow is now pinned to commit SHA `7c92b2ff94b965f4eaef272c3f3e0e766cd683f2` with a version comment `# v5.4.0`. This follows security best practices by: - Preventing unexpected behavior from tag mutations - Ensuring reproducible workflow runs - Making version information visible directly in the workflow file
1 parent 94e3625 commit ad0ba16

2 files changed

Lines changed: 6 additions & 4 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,12 @@
55

66
version: 2
77
updates:
8-
- package-ecosystem: github-actions # See documentation for possible values
9-
directory: / # Location of package manifests
8+
- package-ecosystem: github-actions
9+
directory: /
1010
labels:
1111
- dependencies
1212
- github-actions
1313
schedule:
14-
interval: weekly
14+
interval: daily
15+
cooldown:
16+
default-days: 7

‎.github/workflows/Process-PSModule.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ permissions:
2727

2828
jobs:
2929
Process-PSModule:
30-
uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@releasenotes
30+
uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@7c92b2ff94b965f4eaef272c3f3e0e766cd683f2 # v5.4.0
3131
secrets:
3232
APIKey: ${{ secrets.APIKey }}
3333

0 commit comments

Comments
 (0)