Andreas FehlnerandAlexander Graf 1e58dddb1f chore: add monthly Dependabot and harden checkout (#2713) ...

## What this changes
This PR adds Dependabot configuration and hardens GitHub Actions
checkout behavior.

## Dependabot
- adds .github/dependabot.yml
- enables grouped dependency updates
- schedules updates monthly
- configures a 7-day cooldown to avoid rapid follow-up bumps
- includes GitHub Actions updates

Configured update scopes:
- pip in /
- github-actions in /

## GitHub Actions hardening
Sets persist-credentials: false for ctions/checkout@v4 in:
- .github/workflows/windows_exe.yml
- .github/workflows/packages.yml
- .github/workflows/lint.yml
- .github/workflows/documentation.yml

## Why
- grouped updates reduce PR noise
- monthly cadence is lower maintenance
- cooldown helps avoid update churn
- disabling persisted checkout credentials follows least-privilege CI
practices

---------

Co-authored-by: Alexander Graf <17130992+aandergr@users.noreply.github.com>

2026-10-10 19:29:14 +02:00

..

documentation.yml

chore: add monthly Dependabot and harden checkout (#2713)

2026-10-10 19:29:14 +02:00

lint.yml

chore: add monthly Dependabot and harden checkout (#2713)

2026-10-10 19:29:14 +02:00

packages.yml

chore: add monthly Dependabot and harden checkout (#2713)

2026-10-10 19:29:14 +02:00

stale.yml

chore: add monthly Dependabot and harden checkout (#2713)

2026-10-10 19:29:14 +02:00

windows_exe.yml

chore: add monthly Dependabot and harden checkout (#2713)

2026-10-10 19:29:14 +02:00