Files
codebase-memory-mcp/.github/dependabot.yml
T
Martin Vogel 0b81154813 ci: bump the CodeQL actions to v4.39.0 together and group their Dependabot updates
Dependabot opened one PR per CodeQL action (#2504 init, #2505 analyze, #2506 upload-sarif), each moving to 4.38.2. Merging them one at a time would leave init and analyze on different versions in between. This moves all three to v4.39.0 (6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee, the commit the v4.39.0 tag points to) in one change, and adds a Dependabot group so future CodeQL Action updates arrive as a single PR.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>
2026-10-21 00:34:05 +02:00

13 lines
363 B
YAML

version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
groups:
# init and analyze must run the same CodeQL Action version within a job, and
# upload-sarif is kept in step with them, so one PR bumps all three.
codeql-action:
patterns:
- "github/codeql-action*"