Update `dependabot.yml` to make Dependabot update GitHub actions

zmwaris1 commented 1 year ago

Fixes

Fixes #1046 by @krysal

Description

Some GH action dependencies are behind the latest updates:

actions/setup-python in CI + CD / Lint job
docker/setup-buildx-action in CI + CD / Build images (ingestion_server) job
etc. Made changes in dependabot.yml so that GH dependencies are automatically updated.

Checklist

[x] My pull request has a descriptive title (not a vague title like Update index.md).
[x] My pull request targets the default branch of the repository (main) or a parent feature branch.
[x] My commit messages follow [best practices][best_practices].
[x] My code follows the established code style of the repository.

[best_practices]: https://git-scm.com/book/en/v2/Distributed-Git-Contributing-to-a-Project#_commit_guidelines

Developer Certificate of Origin

``` Developer Certificate of Origin Version 1.1 Copyright (C) 2004, 2006 The Linux Foundation and its contributors. 1 Letterman Drive Suite D4700 San Francisco, CA, 94129 Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Developer's Certificate of Origin 1.1 By making a contribution to this project, I certify that: (a) The contribution was created in whole or in part by me and I have the right to submit it under the open source license indicated in the file; or (b) The contribution is based upon previous work that, to the best of my knowledge, is covered under an appropriate open source license and I have the right under that license to submit that work with modifications, whether created in whole or in part by me, under the same open source license (unless I am permitted to submit under a different license), as indicated in the file; or (c) The contribution was provided directly to me by some other person who certified (a), (b) or (c) and I have not modified it. (d) I understand and agree that this project and the contribution are public and that a record of the contribution (including all personal information I submit with it, including my sign-off) is maintained indefinitely and may be redistributed consistent with this project or the open source license(s) involved. ```

zmwaris1 commented 1 year ago

As stated in the issue I have made the changes in the required file, if any issues persists please reach out, I will take a look as soon as possible.

zmwaris1 commented 1 year ago

@dhruvkb thanks for the reply, I made the requested changes, if there are any more issues please drop a message or do merge the PR as it would be my first contribution. Thank you.

openverse-bot commented 1 year ago

Based on the medium urgency of this PR, the following reviewers are being gently reminded to review this PR:

@dhruvkb This reminder is being automatically generated due to the urgency configuration.

Excluding weekend[^1] days, this PR was updated 4 day(s) ago. PRs labelled with medium urgency are expected to be reviewed within 4 weekday(s)[^2].

@zmwaris1, if this PR is not ready for a review, please draft it to prevent reviewers from getting further unnecessary pings.

[^1]: Specifically, Saturday and Sunday. [^2]: For the purpose of these reminders we treat Monday - Friday as weekdays. Please note that the that generates these reminders runs at midnight UTC on Monday - Friday. This means that depending on your timezone, you may be pinged outside of the expected range.

zmwaris1 commented 1 year ago

@sarayourfriend thanks you for the heads up and sorry that you were removed, it was a mistake on my part, I misclicked.

sarayourfriend commented 1 year ago

No worries! Thanks again for the contribution, we do appreciate it, and welcome to Openverse :slightly_smiling_face:

zmwaris1 commented 1 year ago

@dhruvkb I made the changes as proposed thanks for the help.

WordPress / openverse-api