Skip to content

Manage GH actions via dependabot#194

Merged
p25marti merged 1 commit intomainfrom
opslevel-manage-gh-actions-via-dependabot-22452b27
Nov 12, 2025
Merged

Manage GH actions via dependabot#194
p25marti merged 1 commit intomainfrom
opslevel-manage-gh-actions-via-dependabot-22452b27

Conversation

@derek-etherton-opslevel
Copy link
Copy Markdown
Contributor

Add github-actions Ecosystem to Dependabot Configuration

Summary

This PR adds the github-actions ecosystem to the repository's Dependabot configuration to enable automated dependency updates for GitHub Actions used in workflows.

Changes Made

Modified Files

  • .github/dependabot.yml - Added github-actions ecosystem configuration

What Changed

Added the following configuration block to enable weekly updates for GitHub Actions:

- package-ecosystem: "github-actions"
  directory: "/"
  schedule:
    interval: "weekly"

Impact

Before

  • Dependabot monitored: maven, docker
  • GitHub Actions were not automatically updated

After

  • Dependabot now monitors: maven, docker, github-actions
  • All ecosystems use consistent weekly update schedule
  • 7 GitHub Actions in the repository will receive automated update PRs

Affected Actions

  • jenkins-infra/verify-ci-status-action@v1.2.0
  • release-drafter/release-drafter@v5
  • jenkins-infra/interesting-category-action@v1.0.0
  • actions/checkout@v4
  • actions/setup-java@v3
  • jenkins-infra/jenkins-maven-cd-action@v1.1.0
  • opslevel/actions/.github/workflows/grype.yml@main

Validation

All validation checks passed:

  • ✓ YAML syntax is valid
  • ✓ Configuration matches PR requirements exactly
  • ✓ Consistent with existing ecosystem configurations
  • ✓ No breaking changes

Benefits

  • 🔒 Security: Automated updates keep GitHub Actions secure
  • 🛠️ Maintenance: Reduces manual effort to maintain dependencies
  • 📊 Consistency: Aligns with existing dependency management practices
  • Compliance: Fully satisfies PR requirements

@p25marti p25marti merged commit a895120 into main Nov 12, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants