-
-
Notifications
You must be signed in to change notification settings - Fork 6.3k
Enable dependabot for actions #36191
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
TheFox0x7
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Renovate would probably be better since it works on gitea (and dependabot doesn't afaik) but it doesn't make much difference in the grand scheme of things.
|
I guess as long as we are on GitHub, dependabot is preferred because it's easier to configure and It's already in use for security updates. Should be easy enough to switch to another bot as long as we don't use too many exotic features. |
* giteaofficial/main: Add JSON linting (go-gitea#36192) Bump setup-node to v6, re-enable cache (go-gitea#36207) [skip ci] Updated translations via Crowdin Update chroma to v2.21.1 (go-gitea#36201) Disable dependabot automatic labels (go-gitea#36203) Bump astral-sh/setup-uv from 6 to 7 (go-gitea#36198) Front port changelog (go-gitea#36193) Bump dev-hanz-ops/install-gh-cli-action from 0.1.0 to 0.2.1 (go-gitea#36195) Bump aws-actions/configure-aws-credentials from 4 to 5 (go-gitea#36196) Bump docker/build-push-action from 5 to 6 (go-gitea#36197) Enable dependabot for actions (go-gitea#36191) Bump alpine to 3.23 (go-gitea#36185) Use gitRepo as parameter instead of repopath when invoking sign functions (go-gitea#36162) Fix bug when creating pull request (go-gitea#36166) Bump golangci-lint to 2.7.2, enable modernize stringsbuilder (go-gitea#36180) Use a migration test instead of a wrong test which populated the meta test repositories and fix a migration bug (go-gitea#36160) Update JS deps and eslint enhancements (go-gitea#36147) Add git.DIFF_RENAME_SIMILARITY_THRESHOLD option (go-gitea#36164) Fix OrgAssignment opts (go-gitea#36174) # Conflicts: # models/user/user.go
|
In the future it will likely be renovate, see #33386 (comment). |
Enable dependabot for actions only. These should always be safe to update as long as CI passes and some of them are lagging behind.