A number of the pre-existing github action steps we use are quite out of date, which can cause CI jobs to fail , e.g in #329 we had to update the upload_artifacts action because it was killing our unit tests job, and we are currently getting warnings on our linting job because the version of the checkout action we use is soon to be deprecated.
To save us the effort of manually keeping them up to date, we can use GitHub's dependabot. The config I have in this PR will have the dependabot run once a month and open a PR to update any of the actions we're using that are out of date. For an example, see https://github.com/A-CGray/FEMpy/pull/68.
Someone with the relevant permissions will also have to enable dependabot in the repo settings (below are the settings I have on one of my dependabot-enabled repos)
A number of the pre-existing github action steps we use are quite out of date, which can cause CI jobs to fail , e.g in #329 we had to update the
upload_artifactsaction because it was killing our unit tests job, and we are currently getting warnings on our linting job because the version of thecheckoutaction we use is soon to be deprecated.To save us the effort of manually keeping them up to date, we can use GitHub's dependabot. The config I have in this PR will have the dependabot run once a month and open a PR to update any of the actions we're using that are out of date. For an example, see https://github.com/A-CGray/FEMpy/pull/68.
Someone with the relevant permissions will also have to enable dependabot in the repo settings (below are the settings I have on one of my dependabot-enabled repos)