From dd027374636888a830bc22f389ccabcfc7fa7af2 Mon Sep 17 00:00:00 2001 From: Koichi ITO Date: Wed, 4 Feb 2026 22:26:13 +0900 Subject: [PATCH] Enable Dependabot for GitHub Actions (#1048) Configure Dependabot to automatically detect updates to the actions used in GitHub Actions (e.g., `actions/checkout`) and create pull requests for them. For example, `actions/checkout@v4` is likely updatable, as v6 is already available: https://github.com/modelcontextprotocol/inspector/blob/9f3b4ff/.github/workflows/main.yml#L15 This PR enables Dependabot to update such GitHub Actions dependencies. Updates to outdated actions packages in `.github/workflows` are intentionally not included in this PR, as they will be updated by the initial Dependabot run as part of verifying its behavior. Based on experience, checking for updates on a weekly interval should work well. --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..5ace4600 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,6 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly"