Skip to content

Enable Dependabot#1756

Closed
zkoppert wants to merge 1 commit intomasterfrom
dependabot-440b8cc9-d67c-40cf-9d24-5ebfbf80367a
Closed

Enable Dependabot#1756
zkoppert wants to merge 1 commit intomasterfrom
dependabot-440b8cc9-d67c-40cf-9d24-5ebfbf80367a

Conversation

@zkoppert
Copy link
Copy Markdown
Member

Dependabot could be enabled for this repository. Please enable it by merging this pull request.

@nurhikmahg215

This comment was marked as spam.

jmeridth added a commit that referenced this pull request Jun 17, 2024
Closes #1756

- [x] update github actions to latest versions
- [x] use SHAs instead of tags for github actions, more secure supply chain
- [x] add dependabot file grouping minor/patch dependency updates to reduce PRs

Signed-off-by: jmeridth <jmeridth@gmail.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
jmeridth added a commit that referenced this pull request Jun 17, 2024
Closes #1756

- [x] update github actions to latest versions
- [x] use SHAs instead of tags for github actions, more secure supply chain
- [x] add dependabot file grouping minor/patch dependency updates to reduce PRs

Signed-off-by: jmeridth <jmeridth@gmail.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
jmeridth added a commit that referenced this pull request Jun 17, 2024
Closes #1756

- [x] update github actions to latest versions
- [x] use SHAs instead of tags for github actions, more secure supply chain
- [x] add dependabot file grouping minor/patch dependency updates to reduce PRs
- [x] remove Gemfile.lock from .gitignore and add it back to source control
  - this will allow dependabot to detect dependency updates

Signed-off-by: jmeridth <jmeridth@gmail.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
jmeridth added a commit that referenced this pull request Jun 17, 2024
Closes #1756

- [x] update github actions to latest versions
- [x] use SHAs instead of tags for github actions, more secure supply chain
- [x] add dependabot file grouping minor/patch dependency updates to reduce PRs
- [x] remove Gemfile.lock from .gitignore and add it back to source control
  - this will allow dependabot to detect dependency updates

Signed-off-by: jmeridth <jmeridth@gmail.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants