Skip to content

Commit 84fe70b

Browse files
🩹[Patch]: Update dependabot schedule and pin actions to SHA (#5)
Dependabot now checks for updates daily with a 7-day cooldown period, reducing noise while maintaining timely security updates. All GitHub Actions are pinned to specific commit SHAs with version comments for enhanced security and reproducibility. ## Dependabot Configuration Updated the schedule from `weekly` to `daily` with a `cooldown` of 7 days. This means Dependabot will check for updates daily but will wait 7 days after a new version is released before creating a PR, helping to avoid early adoption of potentially unstable releases. ```yaml schedule: interval: daily cooldown: default-days: 7 ``` ## Pinned Actions All actions are now pinned to specific commit SHAs with version tag comments for traceability: | Action | Version | Commit SHA | |--------|---------|------------| | `actions/checkout` | v6.0.1 | `8e8c483db84b4bee98b60c0593521ed34d9990e8` | | `actions/configure-pages` | v5.0.0 | `983d7736d9b0ae728b81ab479565c72886d7745b` | | `actions/upload-pages-artifact` | v4.0.0 | `7b1f4a764d45c48632c6b24a0339c27f5614fb0b` | | `actions/deploy-pages` | v4.0.5 | `d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e` |
1 parent 2e1637d commit 84fe70b

2 files changed

Lines changed: 9 additions & 7 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,12 @@
55

66
version: 2
77
updates:
8-
- package-ecosystem: github-actions # See documentation for possible values
9-
directory: / # Location of package manifests
8+
- package-ecosystem: github-actions
9+
directory: /
1010
labels:
1111
- dependencies
1212
- github-actions
1313
schedule:
14-
interval: weekly
14+
interval: daily
15+
cooldown:
16+
default-days: 7

‎.github/workflows/Docs.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,11 @@ jobs:
2424
permissions:
2525
contents: read # to checkout the repo
2626
steps:
27-
- uses: actions/checkout@v5
27+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2828
with:
2929
fetch-depth: 0
3030

31-
- uses: actions/configure-pages@v5
31+
- uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0
3232

3333
- name: Install mkdoks-material
3434
run: |
@@ -41,7 +41,7 @@ jobs:
4141
run: |
4242
mkdocs build --config-file ./mkdocs.yml --strict --site-dir _site/
4343
44-
- uses: actions/upload-pages-artifact@v4
44+
- uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
4545

4646
deploy:
4747
needs: build
@@ -55,4 +55,4 @@ jobs:
5555
steps:
5656
- name: Deploy to GitHub Pages
5757
id: deployment
58-
uses: actions/deploy-pages@v4
58+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5

0 commit comments

Comments
 (0)