 dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
c4434125e8
|
Bump actions/setup-python from 6 to 7 (#2752)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-10-10 19:56:46 +02:00 |
|
|
Andreas FehlnerandAlexander Graf
|
1e58dddb1f
|
chore: add monthly Dependabot and harden checkout (#2713)
## What this changes
This PR adds Dependabot configuration and hardens GitHub Actions
checkout behavior.
## Dependabot
- adds .github/dependabot.yml
- enables grouped dependency updates
- schedules updates monthly
- configures a 7-day cooldown to avoid rapid follow-up bumps
- includes GitHub Actions updates
Configured update scopes:
- pip in /
- github-actions in /
## GitHub Actions hardening
Sets persist-credentials: false for ctions/checkout@v4 in:
- .github/workflows/windows_exe.yml
- .github/workflows/packages.yml
- .github/workflows/lint.yml
- .github/workflows/documentation.yml
## Why
- grouped updates reduce PR noise
- monthly cadence is lower maintenance
- cooldown helps avoid update churn
- disabling persisted checkout credentials follows least-privilege CI
practices
---------
Co-authored-by: Alexander Graf <17130992+aandergr@users.noreply.github.com>
|
2026-10-10 19:29:14 +02:00 |
|
|
Alexander Graf
|
44bd4d173b
|
Update dependency versions used in CI
|
2025-11-08 17:33:16 +01:00 |
|
|
Alexander Graf
|
71ae32c85e
|
Update PyPI and Arch packaging process
|
2024-11-21 08:26:05 +01:00 |
|
|
David Hotham
|
f5134ff95e
|
Publish wheels (#2430)
|
2024-11-21 07:58:27 +01:00 |
|
|
tinyboxvk
|
3b705fe5d1
|
Update actions versions (#2260)
Fix GitHub Actions Node.js deprecation warnings.
Use actions/setup-python cache where appropriate.
|
2024-05-20 20:07:44 +02:00 |
|
|
Alexander Graf
|
b44a006344
|
Replace deprecated 'set-output' command in packages workflow
|
2024-05-18 16:17:59 +02:00 |
|
|
Alexander Graf
|
08bf0fef29
|
Attempt to fix publish package workflow
|
2023-11-15 08:02:57 +01:00 |
|
|
Alexander Graf
|
a3dc75c04e
|
Update all dependencies
|
2023-10-14 17:31:41 +02:00 |
|
|
Alexander Graf
|
b808843efe
|
Actions: Optimize Publish Package workflow
|
2022-03-19 17:27:22 +01:00 |
|
|
Alexander Graf
|
3cbee1b318
|
Fully Migrate to GitHub Actions
|
2022-03-19 16:29:48 +01:00 |
|