Skip to content

🩹 [Enhancement]: Update Dependabot schedule and workflow versioning#17

Merged
MariusStorhaug merged 1 commit into
mainfrom
feature/update-dependabot-and-workflow-versioning
Jan 22, 2026
Merged

🩹 [Enhancement]: Update Dependabot schedule and workflow versioning#17
MariusStorhaug merged 1 commit into
mainfrom
feature/update-dependabot-and-workflow-versioning

Conversation

@MariusStorhaug

Copy link
Copy Markdown
Owner

Dependabot now checks for GitHub Actions updates daily instead of weekly, with a 7-day cooldown period that prevents noisy update notifications for rapidly iterating dependencies. Additionally, the Process-PSModule workflow reference is now pinned to a specific commit SHA for improved security and reproducibility.

Dependabot daily schedule with cooldown

The dependabot configuration has been updated to use a daily schedule with a 7-day cooldown period. This allows the repository to receive dependency update notifications earlier while filtering out rapid version churns that would otherwise create unnecessary PR noise.

schedule:
  interval: daily
cooldown:
  default-days: 7

Workflow action version pinning

The Process-PSModule reusable workflow is now pinned to commit SHA 7c92b2ff94b965f4eaef272c3f3e0e766cd683f2 with a version comment # v5.4.0. This follows security best practices by:

  • Preventing unexpected behavior from tag mutations
  • Ensuring reproducible workflow runs
  • Making version information visible directly in the workflow file

@MariusStorhaug
MariusStorhaug marked this pull request as ready for review January 22, 2026 12:07
@MariusStorhaug
MariusStorhaug merged commit ad0ba16 into main Jan 22, 2026
40 of 41 checks passed
@MariusStorhaug
MariusStorhaug deleted the feature/update-dependabot-and-workflow-versioning branch January 22, 2026 12:07
@github-actions

Copy link
Copy Markdown

Module MariusTestModule - 0.3.1 published to the PowerShell Gallery.

@github-actions

Copy link
Copy Markdown

GitHub release for MariusTestModule v0.3.1 has been created.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Enhancement]: Update Dependabot schedule and workflow versioning

1 participant