Skip to content

ci: update actions on supported branches - #18538

Merged
reuben olinsky (reubeno) merged 2 commits into
microsoft:4.0from
PawelWMS:pseudotrurl/dependabot-actions-branches
Aug 21, 2026
Merged

ci: update actions on supported branches#18538
reuben olinsky (reubeno) merged 2 commits into
microsoft:4.0from
PawelWMS:pseudotrurl/dependabot-actions-branches

Conversation

@PawelWMS

@PawelWMS Pawel Winogrodzki (PawelWMS) commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

What

Extend the default-branch Dependabot configuration so grouped GitHub Actions updates target both supported branches:

  • 4.0
  • 3.0-dev

Both entries run weekly and retain the existing seven-day release cooldown.

Why

Dependabot reads .github/dependabot.yml from the default branch. Explicit target entries allow the same central configuration to maintain action pins on both branches.

Risk

Low. This changes only Dependabot scheduling. It may open one grouped action-update PR per target branch when eligible updates exist.

Verification

  • Parsed .github/dependabot.yml as YAML.
  • Verified exactly two GitHub Actions entries target 4.0 and 3.0-dev.
  • Verified both entries use weekly scheduling, grouped updates, and a seven-day cooldown.
  • Ran git diff --check.
  • Review strategy: self-review only.

Related

Configure Dependabot to open weekly grouped GitHub Actions updates for 4.0 and 3.0-dev.

Keep the existing seven-day cooldown before proposing releases.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3e4a178e-19a3-4caa-8a87-53fa6cabe7b9
Copilot AI balanced review requested due to automatic review settings August 20, 2026 22:36
@PawelWMS
Pawel Winogrodzki (PawelWMS) requested a review from a team as a code owner August 20, 2026 22:36

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates Dependabot to maintain GitHub Actions dependencies across both supported branches.

Changes:

  • Targets 4.0 and 3.0-dev.
  • Retains weekly grouped updates and seven-day cooldowns.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Restore the existing default-branch wording and name 3.0-dev explicitly.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3e4a178e-19a3-4caa-8a87-53fa6cabe7b9
Copilot AI review requested due to automatic review settings August 20, 2026 22:40

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Comment thread .github/dependabot.yml
@reubeno

Copy link
Copy Markdown
Member

/azp run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
2 pipeline(s) were filtered out due to trigger conditions.

@reubeno
reuben olinsky (reubeno) merged commit ac7b5ae into microsoft:4.0 Aug 21, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants