Skip to content

Commit bc8cf13

Browse files
committed
Use explicit path for GitHub Actions workflows in Dependabot configuration
The path of the dependencies manifest files must be defined in the Dependabot configuration for each "package ecosystem" entry. When implementing support for managing GitHub Actions workflows dependencies, the Dependabot developers made the inexplicable decision that, unlike any other ecosystem, Dependabot would look for the workflows under the `.github/workflows` subfolder of the specified path, rather than the actual path that is provided. Support for actually using the path specified by the configuration was later added. Since the configuration required by the original behavior was quite unintuitive, it is hereby changed to the actual path of the workflows in the repository.
1 parent af726e3 commit bc8cf13

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/dependabot.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ updates:
66
# Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/dependabot/README.md
77
# See: https://docs.github.com/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
88
- package-ecosystem: github-actions
9-
directory: / # Check the repository's workflows under /.github/workflows/
9+
directory: /.github/workflows
1010
assignees:
1111
- per1234
1212
open-pull-requests-limit: 100

0 commit comments

Comments
 (0)