Skip to content

Commit 5f5f023

Browse files
🩹[Patch]: Configure Dependabot for daily schedule with 7-day cooldown (#88)
## Summary Configures Dependabot for daily update checking with a 7-day cooldown period and pins GitHub Actions to specific commit SHAs for improved security and reproducibility. ## Changes ### Dependabot Configuration - Changed update interval from `weekly` to `daily` for `github-actions` package ecosystem - Added 7-day cooldown period to reduce update noise while maintaining timely dependency updates - Removed `nuget` package ecosystem (not used in this repository) ### Workflow Improvements - Pinned `actions/checkout` to commit SHA `de0fac2e4500dabe0009e67214ff5f5447ce83dd` (v6.0.2) - Pinned `super-linter/super-linter` to commit SHA `d5b0a2ab116623730dd094f15ddc1b6b25bf7b99` (v8.3.2) - Pinned `PSModule/GitHub-Script` to commit SHA `e827bea46d70eebc668bdd59e4654e0846177da4` (v1.7.9) - Changed trigger from `pull_request_target` to `pull_request` in Auto-Release workflow - Disabled `VALIDATE_BIOME_FORMAT` in linter configuration ### Cleanup - Removed deprecated `.github/release.yml` configuration file - Fixed minor markdown formatting in README.md (spacing in table) ### Documentation - Fixed spelling errors throughout documentation: - "Continiuous" → "Continuous" - "wether" → "whether" (multiple occurrences in README.md and action.yml)
1 parent eabd533 commit 5f5f023

File tree

7 files changed

+22
-44
lines changed

7 files changed

+22
-44
lines changed

‎.github/dependabot.yml‎

Lines changed: 3 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -11,11 +11,6 @@ updates:
1111
- dependencies
1212
- github-actions
1313
schedule:
14-
interval: weekly
15-
- package-ecosystem: nuget # See documentation for possible values
16-
directory: / # Location of package manifests
17-
labels:
18-
- dependencies
19-
- nuget
20-
schedule:
21-
interval: weekly
14+
interval: daily
15+
cooldown:
16+
default-days: 7

‎.github/release.yml‎

Lines changed: 0 additions & 18 deletions
This file was deleted.

‎.github/workflows/Action-Test.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
runs-on: ubuntu-latest
2323
steps:
2424
- name: Checkout repo
25-
uses: actions/checkout@v6
25+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2626
with:
2727
persist-credentials: false
2828

‎.github/workflows/Auto-Release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ name: Auto-Release
33
run-name: "Auto-Release - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
44

55
on:
6-
pull_request_target:
6+
pull_request:
77
branches:
88
- main
99
types:
@@ -26,7 +26,7 @@ jobs:
2626
runs-on: ubuntu-latest
2727
steps:
2828
- name: Checkout Code
29-
uses: actions/checkout@v6
29+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3030
with:
3131
persist-credentials: false
3232

‎.github/workflows/Linter.yml‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,15 +19,16 @@ jobs:
1919
runs-on: ubuntu-latest
2020
steps:
2121
- name: Checkout repo
22-
uses: actions/checkout@v6
22+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2323
with:
2424
persist-credentials: false
2525
fetch-depth: 0
2626

2727
- name: Lint code base
28-
uses: super-linter/super-linter@latest
28+
uses: super-linter/super-linter@d5b0a2ab116623730dd094f15ddc1b6b25bf7b99 # v8.3.2
2929
env:
3030
GITHUB_TOKEN: ${{ github.token }}
31+
VALIDATE_BIOME_FORMAT: false
3132
VALIDATE_JSON_PRETTIER: false
3233
VALIDATE_MARKDOWN_PRETTIER: false
3334
VALIDATE_YAML_PRETTIER: false

‎README.md‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ Auto-Release follows:
99

1010
- [SemVer 2.0.0 specifications](https://semver.org)
1111
- [GitHub Flow specifications](https://docs.github.com/en/get-started/using-github/github-flow)
12-
- [Continiuous Delivery practices](https://en.wikipedia.org/wiki/Continuous_delivery)
12+
- [Continuous Delivery practices](https://en.wikipedia.org/wiki/Continuous_delivery)
1313

1414
## How it works
1515

@@ -39,22 +39,22 @@ The action can be configured using the following settings:
3939

4040
| Name | Description | Default | Required |
4141
| --- | --- | --- | --- |
42-
| `AutoCleanup`| Control wether to automatically cleanup prereleases. If disabled, the action will not remove any prereleases. | `true` | false |
43-
| `AutoPatching` | Control wether to automatically handle patches. If disabled, the action will only create a patch release if the pull request has a 'patch' label. | `true` | false |
42+
| `AutoCleanup` | Control whether to automatically cleanup prereleases. If disabled, the action will not remove any prereleases. | `true` | false |
43+
| `AutoPatching` | Control whether to automatically handle patches. If disabled, the action will only create a patch release if the pull request has a 'patch' label. | `true` | false |
4444
| `ConfigurationFile` | The path to the configuration file. Settings in the configuration file take precedence over the action inputs. | `.github\auto-release.yml` | false |
45-
| `CreateMajorTag` | Control wether to create a tag for major releases. | `true` | false |
46-
| `CreateMinorTag` | Control wether to create a tag for minor releases. | `true` | false |
45+
| `CreateMajorTag` | Control whether to create a tag for major releases. | `true` | false |
46+
| `CreateMinorTag` | Control whether to create a tag for minor releases. | `true` | false |
4747
| `DatePrereleaseFormat` | The format to use for the prerelease number using [.NET DateTime format strings](https://learn.microsoft.com/en-us/dotnet/standard/base-types/standard-date-and-time-format-strings). | `''` | false |
4848
| `IgnoreLabels` | A comma separated list of labels that do not trigger a release. | `NoRelease` | false |
49-
| `IncrementalPrerelease` | Control wether to automatically increment the prerelease number. If disabled, the action will ensure only one prerelease exists for a given branch. | `true` | false |
49+
| `IncrementalPrerelease` | Control whether to automatically increment the prerelease number. If disabled, the action will ensure only one prerelease exists for a given branch. | `true` | false |
5050
| `MajorLabels` | A comma separated list of labels that trigger a major release. | `major, breaking` | false |
5151
| `MinorLabels` | A comma separated list of labels that trigger a minor release. | `minor, feature` | false |
5252
| `PatchLabels` | A comma separated list of labels that trigger a patch release. | `patch, fix` | false |
5353
| `UsePRTitleAsReleaseName` | When enabled, uses the pull request title as the name for the GitHub release. | `false` | false |
5454
| `UsePRBodyAsReleaseNotes` | When enabled, uses the pull request body as the release notes for the GitHub release. | `true` | false |
5555
| `UsePRTitleAsNotesHeading` | When enabled, the release notes will begin with the pull request title as a H1 heading followed by the pull request body. The title will include a reference to the PR number. | `true` | false |
5656
| `VersionPrefix` | The prefix to use for the version number. | `v` | false |
57-
| `WhatIf` | Control wether to simulate the action. If enabled, the action will not create any releases. Used for testing. | `false` | false |
57+
| `WhatIf` | Control whether to simulate the action. If enabled, the action will not create any releases. Used for testing. | `false` | false |
5858
| `Debug` | Enable debug output. | `'false'` | false |
5959
| `Verbose` | Enable verbose output. | `'false'` | false |
6060
| `Version` | Specifies the exact version of the GitHub module to install. | | false |

‎action.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7,23 +7,23 @@ branding:
77

88
inputs:
99
AutoCleanup:
10-
description: Control wether to automatically delete the prerelease tags after the stable release is created.
10+
description: Control whether to automatically delete the prerelease tags after the stable release is created.
1111
required: false
1212
default: 'true'
1313
AutoPatching:
14-
description: Control wether to automatically handle patches. If disabled, the action will only create a patch release if the pull request has a 'patch' label.
14+
description: Control whether to automatically handle patches. If disabled, the action will only create a patch release if the pull request has a 'patch' label.
1515
required: false
1616
default: 'true'
1717
ConfigurationFile:
1818
description: The path to the configuration file. Settings in the configuration file take precedence over the action inputs.
1919
required: false
2020
default: .github\auto-release.yml
2121
CreateMajorTag:
22-
description: Control wether to create a major tag when a pull request is merged into the main branch.
22+
description: Control whether to create a major tag when a pull request is merged into the main branch.
2323
required: false
2424
default: 'true'
2525
CreateMinorTag:
26-
description: Control wether to create a minor tag when a pull request is merged into the main branch.
26+
description: Control whether to create a minor tag when a pull request is merged into the main branch.
2727
required: false
2828
default: 'true'
2929
DatePrereleaseFormat:
@@ -35,7 +35,7 @@ inputs:
3535
required: false
3636
default: NoRelease
3737
IncrementalPrerelease:
38-
description: Control wether to automatically increment the prerelease number. If disabled, the action will ensure only one prerelease exists for a given branch.
38+
description: Control whether to automatically increment the prerelease number. If disabled, the action will ensure only one prerelease exists for a given branch.
3939
required: false
4040
default: 'true'
4141
MajorLabels:
@@ -94,7 +94,7 @@ runs:
9494
using: composite
9595
steps:
9696
- name: Auto-Release
97-
uses: PSModule/GitHub-Script@v1
97+
uses: PSModule/GitHub-Script@e827bea46d70eebc668bdd59e4654e0846177da4 # v1.7.9
9898
env:
9999
PSMODULE_AUTO_RELEASE_INPUT_AutoCleanup: ${{ inputs.AutoCleanup }}
100100
PSMODULE_AUTO_RELEASE_INPUT_AutoPatching: ${{ inputs.AutoPatching }}

0 commit comments

Comments
 (0)