Add a simple dependabot config#377
Conversation
Signed-off-by: Nadia Pinaeva <n.m.pinaeva@gmail.com>
✅ Deploy Preview for kubernetes-sigs-network-policy-api ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
k8s-ci-robot
added
cncf-cla: yes
Signed-off-by: Nadia Pinaeva <n.m.pinaeva@gmail.com>
| steps: | ||
| - name: Check out code | ||
| uses: actions/checkout@v2 | ||
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5 |
There was a problem hiding this comment.
what's with the hash? instead of doing "v5" directly?
There was a problem hiding this comment.
the failure is Error: The actions actions/checkout@v2 and actions/upload-artifact@v4 are not allowed in kubernetes-sigs/network-policy-api because all actions must be pinned to a full-length commit SHA.
so I both updated the versions and switched to using hashes
There was a problem hiding this comment.
There is a new enforcement on the Kubernetes org now to use hashes on github actions
k8s-ci-robot
added
the
lgtm
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: npinaeva, tssurya The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
4 participants
Out github actions haven't been updated for a while, trying to fix failures like https://github.com/kubernetes-sigs/network-policy-api/actions/runs/24527049130/job/71855392642?pr=376