From b679a4bec5e5b9888369fb8137129337e01edfaa Mon Sep 17 00:00:00 2001 From: Ryunosuke Sato Date: Mon, 6 Apr 2026 11:23:17 +0900 Subject: [PATCH] Add Dependabot configuration for GitHub Actions Configure weekly updates for GitHub Actions with a 7-day cooldown to reduce supply chain attack risk from newly published versions. Co-Authored-By: Claude Sonnet 4.6 --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..d6411c94 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,8 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + cooldown: + default: 7