Closed alexfikl closed 6 months ago
Is it worth adding a dependabot or something to bump these automatically?
I'd like to? But I don't know how.
Thanks!
I'd like to? But I don't know how.
Should be in Settings > Code security & analysis -> Dependabot version updates
from what I remember. That adds a little file at .github/dependabot.yml
that should contain something like this:
https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot#example-dependabotyml-file-for-github-actions
Tada: https://github.com/inducer/pytential/commit/a2f4c979610dc6caf6fd9ed1bb6800af96052322
(Now to do it for the other umpteen things, ugh.)
And: thanks! I obviously did not know that was a thing.
Noticed
meshmode
bumped them the other day, so went ahead and bumped them here too.Is it worth adding a
dependabot
or something to bump these automatically?