This pull request adds an attribution comment to the Dependabot ignore directives and adds the remaining versioned Actions that should be managed by this project to the list of commented out directives.
💠Motivation and context
All versioned Actions that appear in the workflow(s) managed by this repository should be managed here (i.e. downstream projects should uncomment the ignore directives so Dependabot does not attempt to update downstream repositories). Since they are managed here we should also add attribution so it is clear in downstream projects where specific dependencies are being managed.
🧪 Testing
Automated tests pass.
✅ Pre-approval checklist
[x] This PR has an informative and human-readable title.
[x] Changes are limited to a single goal - eschew scope creep!
[x] All relevant type-of-change labels have been added.
🗣 Description
This pull request adds an attribution comment to the Dependabot ignore directives and adds the remaining versioned Actions that should be managed by this project to the list of commented out directives.
💠Motivation and context
All versioned Actions that appear in the workflow(s) managed by this repository should be managed here (i.e. downstream projects should uncomment the ignore directives so Dependabot does not attempt to update downstream repositories). Since they are managed here we should also add attribution so it is clear in downstream projects where specific dependencies are being managed.
🧪 Testing
Automated tests pass.
✅ Pre-approval checklist