(comdev-events-site) branch add-dependabot created (now eb18ea2)

[po...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

potiuk pushed a change to branch add-dependabot
in repository https://gitbox.apache.org/repos/asf/comdev-events-site.git


      at eb18ea2  Add grouped Dependabot updates for GitHub Actions

This branch includes the following new commits:

     new eb18ea2  Add grouped Dependabot updates for GitHub Actions

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(comdev-events-site) 01/01: Add grouped Dependabot updates for GitHub Actions

[po...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

potiuk pushed a commit to branch add-dependabot
in repository https://gitbox.apache.org/repos/asf/comdev-events-site.git

commit eb18ea29a5aba22558ddc4287b3516a523162612
Author: Jarek Potiuk <ja...@potiuk.com>
AuthorDate: Thu Sep 10 13:55:37 2026 +0200

    Add grouped Dependabot updates for GitHub Actions
    
    The GitHub Actions used by the workflows are the only tracked
    dependencies in this repository, and nothing updates them today.
    
    Grouped into a single weekly pull request rather than one per action,
    with a seven day cooldown so a freshly published release has time to be
    caught and pulled before it is proposed here.
    
    Generated-by: Claude Opus 5
    Claude-Session: https://claude.ai/code/session_01CiacQ5MSzv4x9oLPeZvYDL
---
 .github/dependabot.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..5818049
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,22 @@
+# Dependabot configuration
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  # The GitHub Actions used by the workflows are this repository's only
+  # tracked dependencies; there are no language package manifests here.
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    # Let a new release sit for a week before proposing it, so a compromised
+    # release has time to be caught and pulled.
+    cooldown:
+      default-days: 7
+    # A single grouped pull request per week instead of one PR per action.
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+    commit-message:
+      prefix: "chore"