[PR #5550] [CLOSED] feat(CI): Extend Dependabot workflow for GitHub Actions #5259

New issue

Closed

opened 2026-03-17 02:43:23 +03:00 by kerem · 0 comments

kerem commented

2026-03-17 02:43:23 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hoppscotch/hoppscotch/pull/5550
Author: @ScottBrenner
Created: 11/1/2025
Status: ❌ Closed

Base: main ← Head: patch-1

📝 Commits (5)

3e18cc2 feat(CI): Extend Dependabot workflow for GitHub Actions
4089697 Update .github/dependabot.yml
2616528 Merge branch 'main' into patch-1
dcf78c9 Merge branch 'main' into patch-1
a6469ce Merge branch 'main' into patch-1

📊 Changes

1 file changed (+4 additions, -0 deletions)

View changed files

📝 .github/dependabot.yml (+4 -0)

📄 Description

What's changed

Noticed the actions used in the workflows are are outdated, proposing a Dependabot configuration to update - suggest enabling https://docs.github.com/en/code-security/dependabot/working-with-dependabot/about-dependabot-on-github-actions-runners#enabling-or-disabling-for-your-repository as well

Notes to reviewers

Reference https://docs.github.com/en/actions/security-guides/using-githubs-security-features-to-secure-your-use-of-github-actions#keeping-the-actions-in-your-workflows-secure-and-up-to-date

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hoppscotch/hoppscotch/pull/5550 **Author:** [@ScottBrenner](https://github.com/ScottBrenner) **Created:** 11/1/2025 **Status:** ❌ Closed **Base:** `main` ← **Head:** `patch-1` --- ### 📝 Commits (5) - [`3e18cc2`](https://github.com/hoppscotch/hoppscotch/commit/3e18cc270b6813fb7ed941bfdc5c9be43c838836) feat(CI): Extend Dependabot workflow for GitHub Actions - [`4089697`](https://github.com/hoppscotch/hoppscotch/commit/408969746bb6b07397a8210be41096cdce003413) Update .github/dependabot.yml - [`2616528`](https://github.com/hoppscotch/hoppscotch/commit/261652837d04a5117e793c4d0b87f5bc06a34586) Merge branch 'main' into patch-1 - [`dcf78c9`](https://github.com/hoppscotch/hoppscotch/commit/dcf78c9a0bada6cbe98b082043381eb251c858c1) Merge branch 'main' into patch-1 - [`a6469ce`](https://github.com/hoppscotch/hoppscotch/commit/a6469ce9f3e7b999c0e19a51aee1abeaab5dc694) Merge branch 'main' into patch-1 ### 📊 Changes **1 file changed** (+4 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `.github/dependabot.yml` (+4 -0) </details> ### 📄 Description ### What's changed Noticed the actions used in the workflows are are outdated, proposing a Dependabot configuration to update - suggest enabling https://docs.github.com/en/code-security/dependabot/working-with-dependabot/about-dependabot-on-github-actions-runners#enabling-or-disabling-for-your-repository as well ### Notes to reviewers Reference https://docs.github.com/en/actions/security-guides/using-githubs-security-features-to-secure-your-use-of-github-actions#keeping-the-actions-in-your-workflows-secure-and-up-to-date --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>