Commit Graph

4 Commits

Author SHA1 Message Date
Yugo Kobayashi
5c240a1d0a configure Dependabot for the Go workspace 2026-09-03 22:34:56 +09:00
yugo kobayashi
a87baa5639 sync Go workspace for Dependabot updates (#6240)
* ci: sync Go workspace for Dependabot updates

* ci: preserve Dependabot automatic rebases

* build: monitor all Go modules with Dependabot
2026-09-01 11:42:12 +00:00
charles-chenzz
a7e065ddb4 update dependabot to auto bump deps and enable CVE detect 2023-10-03 20:16:56 +08:00
Naveen
d082c75b65 Included githubactions in the dependabot config
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-03-27 17:06:31 -05:00