keras-team / keras-tuner

A Hyperparameter Tuning Library for Keras
https://keras.io/keras_tuner/
Apache License 2.0
2.86k stars 396 forks source link

Add dependabot to monitor GitHub Actions and Python dependencies #984

Closed pnacht closed 8 months ago

pnacht commented 11 months ago

Hey, it's Pedro (see https://github.com/keras-team/keras-tuner/pull/930 and https://github.com/keras-team/keras-tuner/pull/980) and I'm back with another security suggestion.

This PR is similar to the ones I sent to Keras and KerasCV. However, since all your Python dependencies are unbounded, I've configured Dependabot to only monitor the GitHub Actions used in KerasTuner's workflows.

I've also configured Dependabot to send a single monthly PR (every 1st of the month) updating all Actions with new versions. For an example of what that looks like, see the PR in my fork: https://github.com/pnacht/keras-tuner/pull/1.

I have taken the liberty of merging that Dependabot PR into this one so you don't receive a similar one right after merging this one.

(Following https://github.com/keras-team/keras/issues/18833#issuecomment-1828743533, I haven't sent an issue for this. Let me know if KerasTuner prefers always having an accompanying issue to discuss my contributions).

codecov[bot] commented 11 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (7430e6c) 98.37% compared to head (030223e) 98.37%.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #984 +/- ## ======================================= Coverage 98.37% 98.37% ======================================= Files 50 50 Lines 3085 3085 ======================================= Hits 3035 3035 Misses 50 50 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.