Add dependabot configuration and pin Github Actions actions

conda-forge / conda-smithy

The tool for managing conda-forge feedstocks.

https://conda-forge.org/

BSD 3-Clause "New" or "Revised" License

146 stars 169 forks source link

Closed jaimergp closed 1 month ago

jaimergp commented 1 month ago

Checklist

Trying this out. I'm expecting this config to do the following:

Update the workflows under .github/workflows as usual
~Maaaaybe pick the github-actions.yml.tmpl file in the templates. If that's true, we should see a PR updating upload-artifacts.~ It won't.
I added a dummy workflow with the same uses lines as the GHA template. This will act as a proxy that we reconcile via a test with the actual template.

jaimergp commented 1 month ago

I don't think we'll be lucky with the template... Dependabot parses the YAML.

jaimergp commented 1 month ago

Addressed.

beckermr commented 1 month ago

LGTM!