Pin GHA sha, add dependabot & codeowners

robsdedude · robsdedude · commit f2c7fd02b47e · 2026-05-22T08:37:50.000+02:00
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -0,0 +1,2 @@
+/.github/CODEOWNERS @neo4j/drivers
+/.github/workflows/ @neo4j/drivers
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: daily
+    cooldown:
+      default-days: 3
+    open-pull-requests-limit: 5
+    labels:
+      - "no changelog"
+    assignees:
+      - "robsdedude"
diff --git a/.github/workflows/changelog_entry.yaml b/.github/workflows/changelog_entry.yaml
@@ -13,7 +13,7 @@ jobs:
     name: Check changelog entry
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Verify changelog entry or "no changelog" label
         env:
           GH_TOKEN: ${{ github.token }}
diff --git a/changelog.d/88.dev.md b/changelog.d/88.dev.md

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+/.github/CODEOWNERS @neo4j/drivers`
	`2`	`+/.github/workflows/ @neo4j/drivers`