]> git.ipfire.org Git - thirdparty/libarchive.git/commit
Hash-pin GitHub Actions, keep them updated with dependabot (#1960)
authorPedro Nacht <pnacht@google.com>
Mon, 11 Sep 2023 20:02:18 +0000 (17:02 -0300)
committerGitHub <noreply@github.com>
Mon, 11 Sep 2023 20:02:18 +0000 (22:02 +0200)
commit367c854002e9e6bf2b7ca5784a9a8727f7f0b2ea
treee0cf14638023c21ac80d08936d8e90113da366ec
parentc0cdbb1f15ddef2962dbae1228f25db9555e9d7b
Hash-pin GitHub Actions, keep them updated with dependabot (#1960)

Fixes #1959.

This PR hash-pins GitHub Actions used in workflows and sets up
dependabot to keep the Actions up-to-date.

I've configured dependabot to group all Actions together. So if it ever
discovers that multiple Actions have new versions, it'll only send a
single PR to bump them all together.

---------

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>
.github/dependabot.yml [new file with mode: 0644]
.github/workflows/ci.yml
.github/workflows/cifuzz.yml
.github/workflows/codeql.yml