From 75fb1b0890ab04a2f0161d50b95bf077a7708007 Mon Sep 17 00:00:00 2001 From: Adam Moussa Date: Mon, 27 Jul 2026 15:40:40 -0400 Subject: [PATCH] ci: pin reusable-workflow refs to commit SHA Pins the labeler caller to the current .github main tip per the SHA-pin convention (PR #18). Adds dependabot.yml with the github-actions ecosystem so the pin is advanced weekly; package-ecosystem coverage is not needed here (no package manifests in this repo). --- .github/dependabot.yml | 11 +++++++++++ .github/workflows/labeler.yml | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..1210f19 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + minor-and-patch: + update-types: + - "minor" + - "patch" diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 4af423a..ea6df63 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -8,4 +8,4 @@ permissions: issues: write jobs: label: - uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@main + uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@786dcfe8d95af8e640a76b09f30d2c0e86792157 # main