Files
voculinux/.github/dependabot.yml
T
xavierk 180cd4d512
CI / security (push) Successful in 1m14s
CI / lint (push) Successful in 24s
CI / ai-review (push) Skipped
fix(spec16): close the review findings for the Void port (#34)
Model recommendation keyed to the installed build and free memory, fork-sourced Void templates, signed xbps release workflow on Gitea with the pinned repository key, niri injection guard and wtype-first order, tightened naming sweep, web copy fixes, and CI security and duplication fixes.
2026-11-06 14:13:49 +00:00

17 lines
528 B
YAML

version: 2
updates:
# Actions are pinned by commit SHA (tests/test_workflow_action_pins.py), which
# is only safe if something moves the pins: an action nobody bumps stops
# receiving its own security fixes, and the pin hides that it has gone stale.
# Grouped so this arrives as one pull request a week rather than fifteen.
- package-ecosystem: github-actions
directory: /
schedule:
interval: weekly
cooldown:
default-days: 7
groups:
github-actions:
patterns:
- '*'