This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-mobile-spec.git
The following commit(s) were added to refs/heads/master by this push:
new fc49325 chore: action workflow updates & add dependabot (#225)
fc49325 is described below
commit fc49325bbdd06035b04148666bfabe789f3f17cd
Author: エリス <[email protected]>
AuthorDate: Thu Aug 27 18:06:41 2026 +0900
chore: action workflow updates & add dependabot (#225)
* chore(dependabot): add configurations
* chore(workflow): release-audit
* chore: rename .ratignore -> .rat-excludes
* chore(workflow): remove licence_checker.yml config
---
licence_checker.yml => .github/dependabot.yml | 37 +++++++++++++++++++++++++--
.github/workflows/release-audit.yml | 5 ++--
.ratignore => .rat-excludes | 0
3 files changed, 37 insertions(+), 5 deletions(-)
diff --git a/licence_checker.yml b/.github/dependabot.yml
similarity index 53%
rename from licence_checker.yml
rename to .github/dependabot.yml
index 6456f79..609ac46 100644
--- a/licence_checker.yml
+++ b/.github/dependabot.yml
@@ -15,5 +15,38 @@
# specific language governing permissions and limitations
# under the License.
-# Empty for the release audit workflow.
-# The `license-config` is required even if there are no custom configs
+version: 2
+
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ gh-actions-patch-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ - "minor"
+
+ - package-ecosystem: "npm"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ semver-major-days: 14
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ npm-patch:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ npm-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "minor"
diff --git a/.github/workflows/release-audit.yml
b/.github/workflows/release-audit.yml
index 28a6b87..f50edfc 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,7 +34,7 @@ jobs:
runs-on: ubuntu-latest
steps:
# Checkout project
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
@@ -43,7 +43,7 @@ jobs:
- uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd
# v3.0.0
# Setup environment with node
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
@@ -54,5 +54,4 @@ jobs:
# Check node package licenses
- uses:
erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0
with:
- license-config: 'licence_checker.yml'
include-asf-category-a: true
diff --git a/.ratignore b/.rat-excludes
similarity index 100%
rename from .ratignore
rename to .rat-excludes
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
