Enable Dependabot for NodeJS and GitHub Actions

ajayyy / DeArrow

Crowdsourcing better titles and thumbnails on YouTube

https://dearrow.ajay.app

GNU General Public License v3.0

1.27k stars 33 forks source link

Enable Dependabot for NodeJS and GitHub Actions #179

Closed rugk closed 8 months ago

rugk commented 8 months ago

You have so many GitHub Actions, but not Dependabot :astonished: … time to change that… :upside_down_face:

AFAIK (and this was new to me) Dependabot is not active by default.

This enables it for all dependencies here, so it scans and suggests updates.

[x] I agree to license my contribution under LGPL-3.0 or my contribution is from another project with a license compatible with LGPL-3.0

Inspired by https://github.com/rugk/borgwarehouse/commit/cd96e66c459bdec7749ce80b982075f5f2c54a47

rugk commented 8 months ago

Wanted to submit this to SponsorBlock too, but hu? You have Dependabot PRs there, like https://github.com/ajayyy/SponsorBlock/pull/1881, but without such a YAML file. Did I miss sth. and one can enable it without that/from settings or so?

ajayyy commented 8 months ago

Looks like it is a thing in settings that is on for SponsorBlock but not DeArrow

I'll stick with the setting version as I only want it for CVEs, not every update, but thanks for letting me know about it!

ajayyy commented 8 months ago

All the PRs came in now haha