Merge pull request #15 from avnishsinghh/dependabot

Added dependabot.yml to auto-update GitHub actions
wtsi-npg · Oct 2, 2024 · 5e2a3e8 · 5e2a3e8
2 parents 023bb72 + ecd30aa
commit 5e2a3e8
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+# Referenced from:
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
+
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,7 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 ### Added
 
+* Added .github/dependabot.yml file to auto-update GitHub actions
 * Implemented the `create_token` action. Provided the caller has an admin token,
   this action generates and returns a new pipeline-specific token.