go-sdk/.github/dependabot.yml
2026-07-09 10:46:31 +02:00

15 lines
508 B
YAML

version: 2
updates:
# Check for updates to GitHub Actions every month.
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "monthly"
# Group all github/codeql-action/* sub-paths (init, analyze, ...) into a
# single PR so they are always bumped together. Bumping them independently
# leaves the workflow with mismatched versions across steps, which
# github/codeql-action rejects at runtime.
groups:
codeql-action:
patterns:
- "github/codeql-action/*"