update-dependabot.yml 1.2 KB

1234567891011121314151617181920212223242526272829303132333435363738
  1. name: Update dependabot.yml
  2. on:
  3. workflow_dispatch:
  4. schedule:
  5. - cron: '0 0 * * *' # Once per day at midnight UTC
  6. permissions:
  7. contents: read
  8. jobs:
  9. get-supported-branches:
  10. uses: spring-io/spring-security-release-tools/.github/workflows/retrieve-spring-supported-versions.yml@actions-v1
  11. with:
  12. project: spring-security
  13. type: oss
  14. repository_name: spring-projects/spring-security
  15. main:
  16. runs-on: ubuntu-latest
  17. needs: [get-supported-branches]
  18. if: ${{ (github.repository == 'spring-projects/spring-security') && (github.ref == 'refs/heads/main') }}
  19. permissions:
  20. contents: write
  21. steps:
  22. - uses: actions/checkout@v4
  23. with:
  24. fetch-depth: 1
  25. - uses: spring-io/spring-security-release-tools/.github/actions/generate-dependabot-yml@actions-v1
  26. name: Update dependabot.yml
  27. with:
  28. gradle-branches: ${{ needs.get-supported-branches.outputs.supported_versions }},main
  29. github-actions-branches: ${{ needs.get-supported-branches.outputs.supported_versions }},main,docs-build
  30. gh-token: ${{ secrets.GITHUB_TOKEN }}
  31. - uses: stefanzweifel/git-auto-commit-action@v5
  32. with:
  33. commit_message: Update dependabot.yml