From 1142f9ab5b79b839d2f032a50d3d33e0e0ee15cb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Jun 2024 13:59:17 +0000 Subject: [PATCH 1/2] build(deps): bump actions/checkout from 4.1.6 to 4.1.7 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.6 to 4.1.7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/a5ac7e51b41094c92402da3b24376905380afc29...692973e3d937129bcbf40652eb9f2f61becf3332) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/pymarkdownlnt.yml | 2 +- .github/workflows/update_python_requirements.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pymarkdownlnt.yml b/.github/workflows/pymarkdownlnt.yml index 1a96aac..ef81c38 100644 --- a/.github/workflows/pymarkdownlnt.yml +++ b/.github/workflows/pymarkdownlnt.yml @@ -23,7 +23,7 @@ jobs: with: python-version: 3.9 #install the python needed - name: checkout repo content - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Install and run linter run: |- python3 -m pip install --require-hashes -r tools/requirements.txt diff --git a/.github/workflows/update_python_requirements.yml b/.github/workflows/update_python_requirements.yml index da47bf3..268972c 100644 --- a/.github/workflows/update_python_requirements.yml +++ b/.github/workflows/update_python_requirements.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout this repo if: ${{ github.actor == 'dependabot[bot]' }} - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 ref: ${{ github.event.pull_request.head.ref }} From 5ea5ccb3a6f9c4c9fccdedf134d4ad960abeddf9 Mon Sep 17 00:00:00 2001 From: Chris Swan <478926+cpswan@users.noreply.github.com> Date: Thu, 13 Jun 2024 15:31:07 +0100 Subject: [PATCH 2/2] build(deps): Group Dependabot PRs --- .github/dependabot.yml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a857c4d..b3747d1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,7 +5,15 @@ updates: directory: "/" schedule: interval: "daily" + groups: + github-actions: + patterns: + - "*" - package-ecosystem: "pip" directory: "/tools" # Location of package manifests schedule: - interval: "daily" \ No newline at end of file + interval: "daily" + groups: + pip: + patterns: + - "*"