 John Bampton
|
a6aa0fdb24
|
Dependabot: add cooldown to pre-commit ecosystem
|
2026-04-01 00:46:24 +10:00 |
|
|
John Bampton
|
9bdf998faa
|
Add pre-commit ecosystem to Dependabot
Group dependabot updates to reduce repo noise
Add descriptive group labels
https://github.blog/changelog/2026-03-10-dependabot-now-supports-pre-commit-hooks/
https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#package-ecosystem-
|
2026-03-12 16:59:11 +10:00 |
|
|
John Bampton
|
6d5de7b3c1
|
[CI] Dependabot: add a cooldown period for new releases
Enforces security best practices by requiring a minimum age for new dependency releases before they are automatically updated by Dependabot.
This practice, known as a "cooldown period," helps mitigate supply chain attacks by allowing time for frequently published malicious packages to be identified.
https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#cooldown-
|
2026-01-08 01:02:15 +10:00 |
|
|
John Bampton
|
cc6d25dc29
|
Improve the pre-commit and .github YAML files
|
2024-03-23 22:46:19 +10:00 |
|
|
John Bampton
|
760ce71af0
|
Configure Dependabot updates for Bundler/Ruby
https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates#supported-repositories-and-ecosystems
In future this will keep the Gemfile.lock up to date
|
2023-06-13 12:44:00 +10:00 |
|
|
John Bampton
|
07a7d2a6cb
|
md/yml: remove unneeded blank lines and whitespace
|
2023-02-10 14:02:57 +10:00 |
|
|
John Bampton
|
d52da3fe77
|
feat: add Dependabot config file
Set for GitHub Actions to check for update everyday.
When you add or update the dependabot.yml file, this triggers an immediate check for version updates. Any options that also affect security updates are used the next time a security alert triggers a pull request for a security update.
https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates
|
2021-02-13 17:37:30 +10:00 |
|