Skip to content

chore: setup dependabot - #74

Merged
ceholden merged 4 commits into
mainfrom
chore/dependabot
Nov 4, 2026
Merged

ceholden merged 4 commits into
mainfrom
chore/dependabot

Conversation

@ceholden

@ceholden ceholden commented Nov 4, 2026

Copy link
Copy Markdown
Collaborator

What I am changing

This PR configures dependabot and makes a few updates to project files to better support dependabot:

  • Add workflow for uv, docker, and Github Actions ecosystems
    • Pixi is not supported! We'll want to have a separate custom workflow for this in another PR
  • Pin Github Actions to SHAs instead of tags (see https://github.com/zizmorcore/zizmor)
  • Pin Docker base image to SHAs

@ceholden
ceholden merged commit ea98568 into main Nov 4, 2026
7 checks passed
@ceholden
ceholden deleted the chore/dependabot branch November 4, 2026 22:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant