Skip to content

Update GH action SHAs with dependabot - #13067

Merged
gewarren merged 1 commit into
dotnet:mainfrom
gewarren:dependabot-sha
Sep 16, 2026
Merged

gewarren merged 1 commit into
dotnet:mainfrom
gewarren:dependabot-sha

Conversation

@gewarren

Copy link
Copy Markdown
Collaborator

Contributes to dotnet/docs-tools#743.

@gewarren
gewarren requested a review from a team as a code owner September 15, 2026 22:41
Copilot AI lite review requested due to automatic review settings September 15, 2026 22:41

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No unresolved review comments were identified.

Pull request overview

Updates GitHub Actions to immutable commit SHAs and configures Dependabot for grouped weekly updates.

Changes:

  • Pins workflow actions to full commit SHAs.
  • Adds grouped GitHub Actions Dependabot updates with a seven-day cooldown.
  • Removes trailing whitespace.
File summaries
File Summary
.github/workflows/version-sweep.yml Pins checkout and version sweeper actions.
.github/workflows/quest.yml Pins Quest workflow actions.
.github/workflows/quest-bulk.yml Pins bulk Quest actions.
.github/workflows/ops-build-reporter.yml Pins the OPS reporter action.
.github/workflows/check-for-build-warnings.yml Pins the status checker action.
.github/dependabot.yml Adds GitHub Actions Dependabot configuration.
Review details
  • Files reviewed: 6/6 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@wadepickett wadepickett left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@gewarren: Approved. Looks great, I can't find any issues.

@gewarren
gewarren merged commit 5ffdd33 into dotnet:main Sep 16, 2026
9 checks passed
@gewarren
gewarren deleted the dependabot-sha branch September 16, 2026 03:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants