mirror of
https://github.com/Sea-Haven-Industries/.github.git
synced 2026-10-01 12:03:19 +00:00
Add callable-labeler.yaml, a reusable workflow that carries the label rules inline as the single source of truth and writes them to the runner at execution time, so caller repos need only a short caller workflow and no per-repo labeler.yml. Triggered by callers on pull_request (private org takes no fork PRs); requires contents:read + pull-requests:write + issues:write on every caller so labeler@v5 can create missing labels. Remove the workflow-templates/labeler.yml starter it supersedes (no ruleset workflows-rule or compliance-audit reference depends on it). Add the repo's own dependabot.yml (github-actions, weekly, grouped minor+patch) to keep the action pins current per the Pinning Principle.
11 lines
215 B
YAML
11 lines
215 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
minor-and-patch:
|
|
update-types:
|
|
- "minor"
|
|
- "patch"
|