mirror of
https://github.com/instaloader/instaloader.git
synced 2026-10-16 13:48:03 -07:00
Andreas FehlnerandAlexander Graf
1e58dddb1f
## What this changes This PR adds Dependabot configuration and hardens GitHub Actions checkout behavior. ## Dependabot - adds .github/dependabot.yml - enables grouped dependency updates - schedules updates monthly - configures a 7-day cooldown to avoid rapid follow-up bumps - includes GitHub Actions updates Configured update scopes: - pip in / - github-actions in / ## GitHub Actions hardening Sets persist-credentials: false for ctions/checkout@v4 in: - .github/workflows/windows_exe.yml - .github/workflows/packages.yml - .github/workflows/lint.yml - .github/workflows/documentation.yml ## Why - grouped updates reduce PR noise - monthly cadence is lower maintenance - cooldown helps avoid update churn - disabling persisted checkout credentials follows least-privilege CI practices --------- Co-authored-by: Alexander Graf <17130992+aandergr@users.noreply.github.com>
35 lines
1.3 KiB
YAML
35 lines
1.3 KiB
YAML
name: Mark stale issues and pull requests
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "55 7 * * *"
|
|
|
|
jobs:
|
|
stale:
|
|
|
|
name: Mark stale issues and pull requests
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- uses: actions/stale@v10
|
|
with:
|
|
repo-token: ${{ secrets.GITHUB_TOKEN }}
|
|
only-labels: 'question'
|
|
stale-issue-message: 'There has been no activity on this question for an extended period of time. This issue will be closed after further 14 days of inactivity.'
|
|
stale-issue-label: 'stale'
|
|
exempt-issue-labels: 'leave open'
|
|
days-before-stale: 21
|
|
days-before-close: -1
|
|
remove-stale-when-updated: false
|
|
- uses: actions/stale@v10
|
|
with:
|
|
repo-token: ${{ secrets.GITHUB_TOKEN }}
|
|
stale-issue-message: 'There has been no activity on this issue for an extended period of time. This issue will be closed after further 14 days of inactivity.'
|
|
stale-pr-message: 'There has been no activity on this Pull Request for an extended period of time. This Pull Request will be closed after further 14 days of inactivity.'
|
|
stale-issue-label: 'stale'
|
|
stale-pr-label: 'stale'
|
|
exempt-issue-labels: 'leave open'
|
|
exempt-pr-labels: 'leave open'
|
|
days-before-stale: 189
|
|
days-before-close: 14
|