From eb6e93db3ff7200b467ea5259a040013d8f52efa Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 20 Jun 2026 07:53:08 +0000 Subject: [PATCH] ci: also auto-update GitHub Actions via Dependabot Add a github-actions ecosystem to the Dependabot config so pinned action versions (actions/checkout, setup-r, quarto-actions, etc.) get bumped automatically alongside the macros submodule (per reviewer suggestion). Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01DrceBhXtcKRFaPPEMwxAZN --- .github/dependabot.yml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3dbb2c9..1426f3c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,4 +1,4 @@ -# Keep git submodules up to date automatically. +# Keep git submodules and pinned GitHub Actions up to date automatically. # # This template embeds the shared `macros` repo as a git submodule. Dependabot's # `gitsubmodule` updater opens a PR whenever a submodule's default branch @@ -14,3 +14,13 @@ updates: interval: "weekly" commit-message: prefix: "chore(submodule)" + + # Also keep pinned GitHub Actions current. Dependabot scans .github/workflows/ + # and opens a PR when a newer release of a pinned action is available; + # unversioned @HEAD / @main pins are left untouched. + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + commit-message: + prefix: "chore(actions)"