Skip to content

ci: update github actions and set dependabot for github actions - #1771

Merged
eitsupi merged 3 commits into
masterfrom
dependabot-config
Sep 26, 2026
Merged

eitsupi merged 3 commits into
masterfrom
dependabot-config

Conversation

@eitsupi

@eitsupi eitsupi commented Sep 26, 2026

Copy link
Copy Markdown
Member

I realized that the release would fail.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

The release publishing job must use Node.js 24.

Review effort: Lite
Findings: 1 High severity

Open (1)
What changed in this PR

Updates GitHub Actions versions and adds Dependabot monitoring for workflow dependencies.

Changes:

  • Pins actions to immutable SHAs.
  • Updates workflows to Node.js 24.
  • Adds weekly Dependabot updates with a seven-day cooldown.
  • The release publish job still uses Node.js 20 and should use Node.js 24 to support @vscode/vsce.
File Description
.github/​workflows/​release.yml Updates release actions and runtimes.
.github/​workflows/​pre-release.yml Updates pre-release actions and Node.js.
.github/​workflows/​main.yml Updates CI action versions and Node.js.
.github/​dependabot.yml Configures weekly GitHub Actions dependency updates.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread .github/workflows/release.yml Outdated
Co-authored-by: Copilot Autofix powered by AI <[email protected]>

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

All reviewed changes have been assessed as ready for approval, with no unresolved comments.

Review effort: Lite
Findings: None

Resolved since last review (1)

@eitsupi
eitsupi merged commit a360552 into master Sep 26, 2026
6 checks passed
@eitsupi
eitsupi deleted the dependabot-config branch September 26, 2026 22:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants