engineering-handbook/.github/dependabot.yml
Adam Moussa 75fb1b0890
ci: pin reusable-workflow refs to commit SHA
Pins the labeler caller to the current .github main tip per the SHA-pin
convention (PR #18). Adds dependabot.yml with the github-actions
ecosystem so the pin is advanced weekly; package-ecosystem coverage is
not needed here (no package manifests in this repo).
2026-07-27 15:40:40 -04:00

11 lines
215 B
YAML

version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
groups:
minor-and-patch:
update-types:
- "minor"
- "patch"