This is an automated email from the ASF dual-hosted git repository.
sjanc pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mynewt-core.git
The following commit(s) were added to refs/heads/master by this push:
new 4c46ddfbe ci: Add Dependabot configuration for GitHub actions
4c46ddfbe is described below
commit 4c46ddfbeec082955039ebaaac9e8d764e1f4281
Author: Szymon Janc <[email protected]>
AuthorDate: Thu Oct 22 22:20:40 2026 +0200
ci: Add Dependabot configuration for GitHub actions
ASF GitHub Actions Policy requires automatic dependency management for
repositories using GitHub Actions. Enable Dependabot version updates
for actions used by workflows and composite actions. All updates are
grouped in single pull request, checked weekly at odd minute, so that
each update doesn't trigger separate CI run.
Assisted-by: Claude:claude-opus-5-5
---
.github/dependabot.yml | 38 ++++++++++++++++++++++++++++++++++++++
1 file changed, 38 insertions(+)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..7ad88107f
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,38 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+
+# Keeps GitHub actions used by workflows and composite actions up to
+# date, as required by ASF GitHub Actions Policy. All updates are grouped
+# in single weekly pull request to limit CI runs.
+version: 2
+updates:
+ - package-ecosystem: github-actions
+ directories:
+ - /
+ - /.github/actions/*
+ schedule:
+ interval: weekly
+ day: monday
+ time: "05:17"
+ commit-message:
+ prefix: ci
+ groups:
+ github-actions:
+ patterns:
+ - "*"
