Add GitHub Actions to Dependabot configuration #18566

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open

sd416 wants to merge 3 commits into anthropics:main from sd416:main

.github/dependabot.yml

-Original file line number
+Diff line change
@@ -0,0 +1,15 @@
+    # To get started with Dependabot version updates, you'll need to specify which
+    # package ecosystems to update and where the package manifests are located.
+    # Please see the documentation for all configuration options:
+    # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+    version: 2
+    updates:
+      - package-ecosystem: "github-actions"
+        directory: "/"
+        schedule:
+          interval: "weekly"
+        groups:
+          actions:
+            patterns:
+              - "*"

.github/workflows/auto-close-duplicates.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -15,7 +15,7 @@ jobs: @@
         steps:
           - name: Checkout repository
-            uses: actions/checkout@v4
+            uses: actions/checkout@v6
           - name: Setup Bun
             uses: oven-sh/setup-bun@v2
@@ Expand Down @@

.github/workflows/backfill-duplicate-comments.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -29,7 +29,7 @@ jobs: @@
         steps:
           - name: Checkout repository
-            uses: actions/checkout@v4
+            uses: actions/checkout@v6
           - name: Setup Bun
             uses: oven-sh/setup-bun@v2
@@ Expand Down @@

.github/workflows/claude-dedupe-issues.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -21,7 +21,7 @@ jobs: @@
         steps:
           - name: Checkout repository
-            uses: actions/checkout@v4
+            uses: actions/checkout@v6
           - name: Run Claude Code slash command
             uses: anthropics/claude-code-action@v1
@@ Expand Down @@

.github/workflows/claude-issue-triage.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -15,7 +15,7 @@ jobs: @@
         steps:
           - name: Checkout repository
-            uses: actions/checkout@v4
+            uses: actions/checkout@v6
           - name: Setup GitHub MCP Server
             run: |
@@ Expand Down @@

.github/workflows/claude.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -25,7 +25,7 @@ jobs: @@
           id-token: write
         steps:
           - name: Checkout repository
-            uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4
+            uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
             with:
               fetch-depth: 1
@@ Expand Down @@

.github/workflows/lock-closed-issues.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -17,7 +17,7 @@ jobs: @@
         runs-on: ubuntu-latest
         steps:
           - name: Lock closed issues after 7 days of inactivity
-            uses: actions/github-script@v7
+            uses: actions/github-script@v8
             with:
               script: |
                 const sevenDaysAgo = new Date();
@@ Expand Down @@

.github/workflows/oncall-triage.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -20,7 +20,7 @@ jobs: @@
         steps:
           - name: Checkout repository
-            uses: actions/checkout@v4
+            uses: actions/checkout@v6
           - name: Setup GitHub MCP Server
             run: |
@@ Expand Down @@

.github/workflows/remove-autoclose-label.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -17,7 +17,7 @@ jobs: @@
         runs-on: ubuntu-latest
         steps:
           - name: Remove autoclose label
-            uses: actions/github-script@v7
+            uses: actions/github-script@v8
             with:
               script: |
                 console.log(`Removing autoclose label from issue #${context.issue.number} due to new comment from ${context.payload.comment.user.login}`);
@@ Expand Down @@

.github/workflows/stale-issue-manager.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -17,7 +17,7 @@ jobs: @@
         runs-on: ubuntu-latest
         steps:
           - name: Manage stale issues
-            uses: actions/github-script@v7
+            uses: actions/github-script@v8
             with:
               script: |
                 const oneMonthAgo = new Date();
@@ Expand Down @@

Provide feedback