From bc8cf13e7d417315a71ba88c10997a713734994d Mon Sep 17 00:00:00 2001 From: per1234 Date: Sun, 7 Sep 2025 16:48:48 -0700 Subject: [PATCH] Use explicit path for GitHub Actions workflows in Dependabot configuration The path of the dependencies manifest files must be defined in the Dependabot configuration for each "package ecosystem" entry. When implementing support for managing GitHub Actions workflows dependencies, the Dependabot developers made the inexplicable decision that, unlike any other ecosystem, Dependabot would look for the workflows under the `.github/workflows` subfolder of the specified path, rather than the actual path that is provided. Support for actually using the path specified by the configuration was later added. Since the configuration required by the original behavior was quite unintuitive, it is hereby changed to the actual path of the workflows in the repository. --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bc9d41bed..ea546fe9a 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,7 +6,7 @@ updates: # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/dependabot/README.md # See: https://docs.github.com/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot - package-ecosystem: github-actions - directory: / # Check the repository's workflows under /.github/workflows/ + directory: /.github/workflows assignees: - per1234 open-pull-requests-limit: 100