Skip to content

chore: add dependabot and update github actions#1817

Merged
jmeridth merged 1 commit intomasterfrom
jm_update_github_actions
Jun 17, 2024
Merged

chore: add dependabot and update github actions#1817
jmeridth merged 1 commit intomasterfrom
jm_update_github_actions

Conversation

@jmeridth
Copy link
Copy Markdown
Contributor

@jmeridth jmeridth commented Jun 17, 2024

Closes #1756

  • update github actions to latest versions
  • use SHAs instead of tags for github actions, more secure supply chain
  • add dependabot file grouping minor/patch dependency updates to reduce PRs
  • remove Gemfile.lock from .gitignore and add it back to source control
    • this will allow dependabot to detect dependency updates

@jmeridth jmeridth self-assigned this Jun 17, 2024
@jmeridth jmeridth force-pushed the jm_update_github_actions branch from ce5c728 to 5531f00 Compare June 17, 2024 15:49
@jmeridth jmeridth requested review from kenyonj and zkoppert June 17, 2024 15:49
@kenyonj
Copy link
Copy Markdown
Contributor

kenyonj commented Jun 17, 2024

Want to add back in Gemfile.lock to this repo with this PR so that dependabot can open PRs?

@jmeridth jmeridth force-pushed the jm_update_github_actions branch from 5531f00 to cf2f42a Compare June 17, 2024 15:59
Closes #1756

- [x] update github actions to latest versions
- [x] use SHAs instead of tags for github actions, more secure supply chain
- [x] add dependabot file grouping minor/patch dependency updates to reduce PRs
- [x] remove Gemfile.lock from .gitignore and add it back to source control
  - this will allow dependabot to detect dependency updates

Signed-off-by: jmeridth <jmeridth@gmail.com>
Co-authored-by: Zack Koppert <zkoppert@github.com>
@jmeridth jmeridth force-pushed the jm_update_github_actions branch from cf2f42a to e6973df Compare June 17, 2024 16:00
Copy link
Copy Markdown
Contributor

@kenyonj kenyonj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM Thanks!

@jmeridth jmeridth merged commit 1239eee into master Jun 17, 2024
@jmeridth jmeridth deleted the jm_update_github_actions branch June 17, 2024 16:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants