ci: Pinning third party GitHub Actions sha

2026-05-17 04:30:13 +00:00 · 2025-03-18 16:58:33 +09:00
parent cc3c70af90
commit 70eb7cd3ee
5 changed files with 18 additions and 13 deletions
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -5,3 +5,8 @@ updates:
    directory: "/"
    schedule:
      interval: "weekly" # Check for updates to GitHub Actions every week
+    ignore:
+      # I just want update action when major/minor version is updated. patch updates are too noisy.
+      - dependency-name: '*'
+        update-types:
+          - version-update:semver-patch