Enable Dependabot for GitHub Actions#17775
Enable Dependabot for GitHub Actions#17775daxian-dbw merged 2 commits intoPowerShell:masterfrom Molkree:dependabot-gh-actions
Conversation
|
This pull request has been automatically marked as Review Needed because it has been there has not been any activity for 7 days. |
Co-authored-by: Dongbo Wang <dongbow@microsoft.com>
|
This PR has Quantification details
Why proper sizing of changes matters
Optimal pull request sizes drive a better predictable PR flow as they strike a
What can I do to optimize my changes
How to interpret the change counts in git diff output
Was this comment helpful? 👍 :ok_hand: :thumbsdown: (Email) |
|
🎉 Handy links: |
PR Summary
Enable Dependabot for GitHub Actions.
PR Context
This repository already uses Dependabot but not for GitHub Actions used in workflows.
I see some old (major) versions used in various workflows, with CodeQL v1 being probably the most important one because it will be deprecated in December.
https://github.blog/changelog/2022-04-27-code-scanning-deprecation-of-codeql-action-v1/
Fixes #17743
PR Checklist
.h,.cpp,.cs,.ps1and.psm1files have the correct copyright headerWIP:or[ WIP ]to the beginning of the title (theWIPbot will keep its status check atPendingwhile the prefix is present) and remove the prefix when the PR is ready.(which runs in a different PS Host).