You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cordova.apache.org by er...@apache.org on 2026/08/26 17:09:26 UTC
(cordova-app-hello-world) branch master updated: chore: action workflow updates & add dependabot (#104)
This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-app-hello-world.git
The following commit(s) were added to refs/heads/master by this push:
new 257a2e6 chore: action workflow updates & add dependabot (#104)
257a2e6 is described below
commit 257a2e6b32cb6f20cc2f5b7717a1bf12f155065b
Author: エリス <er...@users.noreply.github.com>
AuthorDate: Thu Aug 27 02:09:20 2026 +0900
chore: action workflow updates & add dependabot (#104)
* chore(dependabot): add configurations
* chore(workflow): release-audit
* chore: rename .ratignore -> .rat-excludes
---
.../release-audit.yml => dependabot.yml} | 54 +++++++++++++---------
.github/workflows/release-audit.yml | 9 ++--
.ratignore => .rat-excludes | 0
3 files changed, 39 insertions(+), 24 deletions(-)
diff --git a/.github/workflows/release-audit.yml b/.github/dependabot.yml
similarity index 54%
copy from .github/workflows/release-audit.yml
copy to .github/dependabot.yml
index df9e73e..609ac46 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/dependabot.yml
@@ -15,26 +15,38 @@
# specific language governing permissions and limitations
# under the License.
-name: Release Auditing
+version: 2
-on:
- push:
- branches-ignore:
- - 'dependabot/**'
- pull_request:
- branches:
- - '*'
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ gh-actions-patch-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ - "minor"
-permissions:
- contents: read
-
-jobs:
- test:
- name: Audit Licenses
- runs-on: ubuntu-latest
- steps:
- # Checkout project
- - uses: actions/checkout@v5
-
- # Check license headers (v1.2.0)
- - uses: erisu/apache-rat-action@3127a8c18f3bb10e91c60e835144085b31c5c463
+ - package-ecosystem: "npm"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ semver-major-days: 14
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ npm-patch:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ npm-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "minor"
diff --git a/.github/workflows/release-audit.yml b/.github/workflows/release-audit.yml
index df9e73e..136b3ff 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,7 +34,10 @@ jobs:
runs-on: ubuntu-latest
steps:
# Checkout project
- - uses: actions/checkout@v5
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+ with:
+ persist-credentials: false
+ fetch-depth: 1
- # Check license headers (v1.2.0)
- - uses: erisu/apache-rat-action@3127a8c18f3bb10e91c60e835144085b31c5c463
+ # Check license headers
+ - uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd # v3.0.0
diff --git a/.ratignore b/.rat-excludes
similarity index 100%
rename from .ratignore
rename to .rat-excludes
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org