Skip to content

ci(deps): Run Dependabot GitHub Actions updates monthly - #3449

Merged
szokeasaurusrex merged 2 commits into
masterfrom
szokeasaurusrex/dependabot-gha-monthly
Oct 22, 2026
Merged

szokeasaurusrex merged 2 commits into
masterfrom
szokeasaurusrex/dependabot-gha-monthly

Conversation

@sentry-junior

@sentry-junior sentry-junior Bot commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Changes the Dependabot version update schedule for GitHub Actions from weekly to monthly. sentry-cli is no longer actively developed, so weekly action bumps cause more review churn than they're worth.

We considered running security updates only, by setting open-pull-requests-limit: 0. That doesn't work here. Dependabot only raises alerts for actions referenced by semantic version, not by SHA (docs). Every action in this repo is pinned to a SHA, so security-only mode would effectively stop all action updates.

via @szokeasaurusrex.

--

View Junior Session [Sentry]

sentry-cli is no longer actively developed, so weekly action bumps add
more review noise than value.

Co-Authored-By: Daniel Szoke <7881302+szokeasaurusrex@users.noreply.github.com>
@szokeasaurusrex
szokeasaurusrex merged commit 7bc7060 into master Oct 22, 2026
29 checks passed
@szokeasaurusrex
szokeasaurusrex deleted the szokeasaurusrex/dependabot-gha-monthly branch October 22, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants