From a56ccabe349757993e31b022101a3ff232d33108 Mon Sep 17 00:00:00 2001 From: Ralf Juengling Date: Thu, 29 Oct 2026 07:50:04 -0700 Subject: [PATCH] [no-ci] CI: let Dependabot update composite actions directory: / only covers .github/workflows/, so pins under .github/actions/ have never been bumped (griffe-api-check is on setup-uv v8.2.0, fetch_ctk on actions/cache v5.0.4). List the composite action directories for both the main and 12.9.x entries. --- .github/dependabot.yml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 72fe9d76db7..7a87fb3ac04 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,7 +6,10 @@ version: 2 updates: # GitHub Actions updates targeting the default branch (main) - package-ecosystem: github-actions - directory: / + # "/" covers only .github/workflows/; composite actions must be listed. + directories: + - / + - /.github/actions/* schedule: interval: "monthly" time: "09:00" @@ -55,7 +58,9 @@ updates: # GitHub Actions updates targeting the 12.9.x branch - package-ecosystem: github-actions - directory: / + directories: + - / + - /.github/actions/* target-branch: "12.9.x" # keep in sync with backport_branch in ci/versions.yml schedule: interval: "monthly"