Skip to content

Fix: Configure Dependabot for GitHub Actions updates#321

Open
sd416 wants to merge 4 commits intogoogle:mainfrom
sd416:main
Open

Fix: Configure Dependabot for GitHub Actions updates#321
sd416 wants to merge 4 commits intogoogle:mainfrom
sd416:main

Conversation

@sd416
Copy link

@sd416 sd416 commented Jan 19, 2026

Add GitHub Actions to Dependabot configuration for weekly updates.
Fixes #322

sd416 and others added 4 commits January 19, 2026 19:08
Added GitHub Actions to Dependabot configuration.
Configure Dependabot for GitHub Actions updates
Bumps the actions group with 4 updates: [actions/github-script](https://github.com/actions/github-script), [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python) and [tj-actions/changed-files](https://github.com/tj-actions/changed-files).


Updates `actions/github-script` from 7 to 8
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v8)

Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `actions/setup-python` from 5 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

Updates `tj-actions/changed-files` from 46 to 47
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@v46...v47)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: tj-actions/changed-files
  dependency-version: '47'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
…3380b5a9

build(deps): bump the actions group with 4 updates
@google-cla
Copy link

google-cla bot commented Jan 19, 2026

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@github-actions
Copy link

Infrastructure File Protection

This PR modifies protected infrastructure files:

  • .github/dependabot.yml (15 changes)
  • .github/workflows/auto-update-pr.yaml (2 changes)
  • .github/workflows/check-infrastructure-changes.yml (2 changes)
  • .github/workflows/check-linked-issue.yml (2 changes)
  • .github/workflows/check-pr-size.yml (4 changes)
  • .github/workflows/check-pr-up-to-date.yaml (4 changes)
  • .github/workflows/ci.yaml (40 changes)
  • .github/workflows/publish.yml (4 changes)
  • .github/workflows/revalidate-pr.yml (10 changes)
  • .github/workflows/validate-community-providers.yaml (4 changes)
  • .github/workflows/validate_pr_template.yaml (2 changes)
  • .github/workflows/zenodo-publish.yml (4 changes)

Only repository maintainers are allowed to modify infrastructure files (including .github/, build configuration, and repository documentation).

Note: If these are only formatting changes, please:

  1. Revert changes to .github/ files
  2. Use ./autoformat.sh to format only source code directories
  3. Avoid running formatters on infrastructure files

If structural changes are necessary:

  1. Open an issue describing the needed infrastructure changes
  2. A maintainer will review and implement the changes if approved

For more information, see our Contributing Guidelines.

@github-actions
Copy link

No linked issues found. Please link an issue in your pull request description or title.

Per our Contributing Guidelines, all PRs must:

  • Reference an issue with one of:
    • Closing keywords: Fixes #123, Closes #123, Resolves #123 (auto-closes on merge in the same repository)
    • Reference keywords: Related to #123, Refs #123, Part of #123, See #123 (links without closing)
  • The linked issue should have 5+ 👍 reactions from unique users (excluding bots and the PR author)
  • Include discussion demonstrating the importance of the change

You can also use cross-repo references like owner/repo#123 or full URLs.

@github-actions github-actions bot added the size/S Pull request with 50-150 lines changed label Jan 19, 2026
@sd416
Copy link
Author

sd416 commented Jan 19, 2026

Fixes #322

@sd416 sd416 changed the title Configure Dependabot for GitHub Actions updates Fix: Configure Dependabot for GitHub Actions updates Jan 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/S Pull request with 50-150 lines changed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Github Actions needs manual updates

3 participants