Add dependabot config for GitHub Actions version updates#9033
Conversation
|
Hi @Ankitsinghsisodya. Thanks for your PR. I'm waiting for a knative member to verify that this patch is reasonable to test. If it is, they should reply with Tip We noticed you've done this a few times! Consider joining the org to skip this step and gain Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
ab98f0a to
0223adc
Compare
There was a problem hiding this comment.
Pull request overview
Adds Dependabot configuration to automate GitHub Actions dependency updates, and aligns Slack notification action versions used in workflows.
Changes:
- Add
.github/dependabot.ymlenabling weekly updates for thegithub-actionsecosystem. - Bump
rtCamp/action-slack-notifytov2.3.3in the weekly Slack reminder workflow. - Bump
rtCamp/action-slack-notifytov2.3.3in the KinD e2e workflow failure notification.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 5 comments.
| File | Description |
|---|---|
.github/dependabot.yml |
Introduces Dependabot config to check GitHub Actions dependencies weekly. |
.github/workflows/weekly-office-hours-slack-reminder.yaml |
Updates Slack notification action version for the scheduled reminder. |
.github/workflows/kind-e2e.yaml |
Updates Slack notification action version for e2e failure alerts. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #9033 +/- ##
==========================================
- Coverage 51.07% 51.06% -0.01%
==========================================
Files 409 409
Lines 21999 21997 -2
==========================================
- Hits 11236 11233 -3
+ Misses 9903 9901 -2
- Partials 860 863 +3 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Can we group those updates into one PR (like here). Also please check on the ignore similar to https://github.com/knative/serving/blob/main/.github/dependabot.yaml
…ignore specific non-versioned actions
Done! |
|
/ok-to-test |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: Ankitsinghsisodya, creydr The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Closes #9034
Summary
.github/dependabot.ymlto enable automatic weekly bumps of GitHub Actions versionsgithub-actionsecosystemTest plan