This PR adds a dependabot configuration file that enables weekly update checks for all github actions used within workflows in the project. Additionally, it includes a workflow that automatically merges dependabot PRs for minor and patch version updates (major version bumps must be manually merged to avoid breaking changes).
Using these features will help keep all workflows up to date with a minimal amount of manual intervention necessary.
Note: this functionality has already been added to the Spatie laravel package skeleton repository.
freekmurze
commented
1 year ago
This PR adds a dependabot configuration file that enables weekly update checks for all github actions used within workflows in the project. Additionally, it includes a workflow that automatically merges dependabot PRs for minor and patch version updates (major version bumps must be manually merged to avoid breaking changes).
Using these features will help keep all workflows up to date with a minimal amount of manual intervention necessary.
Note: this functionality has already been added to the Spatie laravel package skeleton repository.