Commit 84fe70b
authored
🩹[Patch]: Update dependabot schedule and pin actions to SHA (#5)
Dependabot now checks for updates daily with a 7-day cooldown period,
reducing noise while maintaining timely security updates. All GitHub
Actions are pinned to specific commit SHAs with version comments for
enhanced security and reproducibility.
## Dependabot Configuration
Updated the schedule from `weekly` to `daily` with a `cooldown` of 7
days. This means Dependabot will check for updates daily but will wait 7
days after a new version is released before creating a PR, helping to
avoid early adoption of potentially unstable releases.
```yaml
schedule:
interval: daily
cooldown:
default-days: 7
```
## Pinned Actions
All actions are now pinned to specific commit SHAs with version tag
comments for traceability:
| Action | Version | Commit SHA |
|--------|---------|------------|
| `actions/checkout` | v6.0.1 |
`8e8c483db84b4bee98b60c0593521ed34d9990e8` |
| `actions/configure-pages` | v5.0.0 |
`983d7736d9b0ae728b81ab479565c72886d7745b` |
| `actions/upload-pages-artifact` | v4.0.0 |
`7b1f4a764d45c48632c6b24a0339c27f5614fb0b` |
| `actions/deploy-pages` | v4.0.5 |
`d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e` |1 parent 2e1637d commit 84fe70b
2 files changed
Lines changed: 9 additions & 7 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
9 | | - | |
| 8 | + | |
| 9 | + | |
10 | 10 | | |
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
14 | | - | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
24 | 24 | | |
25 | 25 | | |
26 | 26 | | |
27 | | - | |
| 27 | + | |
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
31 | | - | |
| 31 | + | |
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
| |||
41 | 41 | | |
42 | 42 | | |
43 | 43 | | |
44 | | - | |
| 44 | + | |
45 | 45 | | |
46 | 46 | | |
47 | 47 | | |
| |||
55 | 55 | | |
56 | 56 | | |
57 | 57 | | |
58 | | - | |
| 58 | + | |
0 commit comments