pdf.js/.github/dependabot.yml

version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
    labels:
      - "dependencies"
chore: Included githubactions in the dependabot config This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure. Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> 2022-06-25 10:30:04 +09:00			`version: 2`
			`updates:`
			`- package-ecosystem: "github-actions"`
			`directory: "/"`
			`schedule:`
			`interval: "weekly"`
Stop Dependabot from creating its own, otherwise unused, labels Currently all Dependabot update PRs get tagged with a "javascript" label, which is annoying since we don't actually use that one. To try and avoid this we specify the labels explicitly, please see https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#labels 2022-11-14 23:04:05 +09:00			`labels:`
			`- "dependencies"`