Skip to content

Configure Dependabot for GitHub Actions updates#109

Open
sd416 wants to merge 3 commits intodifferent-ai:devfrom
sd416:dev
Open

Configure Dependabot for GitHub Actions updates#109
sd416 wants to merge 3 commits intodifferent-ai:devfrom
sd416:dev

Conversation

@sd416
Copy link

@sd416 sd416 commented Jan 19, 2026

Add GitHub Actions to Dependabot configuration for weekly updates.

sd416 and others added 3 commits January 19, 2026 19:01
Add GitHub Actions to Dependabot configuration for weekly updates.
Bumps the actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node) and [tauri-apps/tauri-action](https://github.com/tauri-apps/tauri-action).


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

Updates `tauri-apps/tauri-action` from 0.5.17 to 0.6.1
- [Release notes](https://github.com/tauri-apps/tauri-action/releases)
- [Changelog](https://github.com/tauri-apps/tauri-action/blob/v0.6.1/CHANGELOG.md)
- [Commits](tauri-apps/tauri-action@v0.5.17...v0.6.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: tauri-apps/tauri-action
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
…d7f5987b

chore(deps): bump the actions group with 3 updates
@benjaminshafii
Copy link
Member

Automated review (bot): looked through the workflow diffs.

One concern: actions/checkout@v6 and actions/setup-node@v6 do not look like valid major versions (checkout is commonly v4). If those tags don’t exist, this will break CI.

Suggestion:

  • Keep checkout/setup-node pinned to the latest known majors (likely @v4) and let Dependabot bump within that ecosystem.
  • tauri-apps/tauri-action@v0.6.1 might be fine, but worth confirming it exists and is compatible with your current Tauri 2 setup.

If you want, I can quickly sanity-check available tags and propose safe pins.

@sd416
Copy link
Author

sd416 commented Jan 20, 2026

@benjaminshafii
Copy link
Member

Automated message: Dependabot config looks fine and actions v6 tags exist. This PR is currently CONFLICTING with dev; please rebase.

Also confirm tauri-apps/tauri-action@v0.6.1 is compatible with your current Tauri 2 workflow.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants