Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automatically check for new GitHub actions versions #113

Merged
merged 1 commit into from
Dec 8, 2022

Conversation

victorlin
Copy link
Member

@victorlin victorlin commented Dec 7, 2022

Description of proposed changes

Configure dependabot to do this for us.

More info: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

Related issue(s)

N/A

Testing

  • Checks pass
  • Pushed changes to a fork repo, enabled dependabot, and observed new dependabot PRs as expected. (evidence)

@victorlin victorlin requested a review from a team December 7, 2022 20:39
@victorlin victorlin self-assigned this Dec 7, 2022
@victorlin victorlin merged commit 9873fb1 into master Dec 8, 2022
@victorlin victorlin deleted the victorlin/use-dependabot-for-github-actions branch December 8, 2022 19:32
@victorlin
Copy link
Member Author

Update: The PRs have spawned (#116, #117) but CI is failing due to lack of access to org-level Actions secrets.

I plan to add the required secrets as org-level Dependabot secrets in addition to the existing Actions secrets. This will require re-generating the tokens on @nextstrain-bot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
No open projects
Development

Successfully merging this pull request may close these issues.

2 participants