mirror of
https://github.com/only-cli/oc.git
synced 2026-09-15 10:40:56 +02:00
only-cliandClaude Fable 5
59964c5dca
Dependabot opened separate PRs for init (#35) and analyze (#34). Each failed because the two steps must run the same version of the action. Bump init, analyze and upload-sarif together and add a Dependabot group so future codeql-action bumps arrive as one PR. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
19 lines
536 B
YAML
19 lines
536 B
YAML
# Keep the three runtime deps and the CI actions patched. Dependabot opens
|
|
# PRs; CI runs the offline test suite against them before anything merges.
|
|
version: 2
|
|
updates:
|
|
- package-ecosystem: npm
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
open-pull-requests-limit: 5
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
schedule:
|
|
interval: weekly
|
|
groups:
|
|
# init and analyze must run the same version, so bump them in one PR.
|
|
codeql-action:
|
|
patterns:
|
|
- github/codeql-action*
|