gson-comments/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: "maven"
    directory: "/"
    schedule:
      interval: "daily"

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
Create dependabot.yml 2021-05-14 01:30:52 +02:00			`version: 2`
			`updates:`
			`- package-ecosystem: "maven"`
			`directory: "/"`
			`schedule:`
			`interval: "daily"`
Upgrade GitHub actions & pin to commit hash (#2598) * Upgrade GitHub actions & pin to commit hash The only exception is `google/oss-fuzz` which does not seem to have releases or Git tags, so pinning might not make sense there. Also adds `actions/setup-java` to the `codeql-analysis` workflow to explicitly specify the JDK version to use (and to use the caching of that action) instead of relying on the default JDK of the runner image. * Enable Dependabot for GitHub actions --------- Co-authored-by: Éamonn McManus <emcmanus@google.com> 2024-01-29 18:00:13 +01:00
			`- package-ecosystem: "github-actions"`
			`directory: "/"`
			`schedule:`
			`interval: "weekly"`