From 3a0010b669156e9e97eb68debab28f50a2e02c42 Mon Sep 17 00:00:00 2001 From: CrazyMax Date: Thu, 20 Aug 2020 17:32:26 +0200 Subject: [PATCH] Add note about dependabot --- README.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/README.md b/README.md index 235393c..499f853 100644 --- a/README.md +++ b/README.md @@ -21,6 +21,7 @@ ___ * [Customizing](#customizing) * [inputs](#inputs) * [environment variables](#environment-variables) +* [Keep up-to-date with GitHub Dependabot](#keep-up-to-date-with-github-dependabot) * [How can I help?](#how-can-i-help) * [License](#license) @@ -144,6 +145,22 @@ Following environment variables can be used as `step.env` keys | `GITHUB_TOKEN` | [GITHUB_TOKEN](https://help.github.com/en/actions/configuring-and-managing-workflows/authenticating-with-the-github_token) as provided by `secrets` | | `GH_PAT` | Use a [Personal Access Token](https://help.github.com/articles/creating-a-personal-access-token-for-the-command-line/) if you want to deploy to another repo | +## Keep up-to-date with GitHub Dependabot + +Since [Dependabot](https://docs.github.com/en/github/administering-a-repository/keeping-your-actions-up-to-date-with-github-dependabot) +has [native GitHub Actions support](https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#package-ecosystem), +to enable it on your GitHub repo all you need to do is add the `.github/dependabot.yml` file: + +```yaml +version: 2 +updates: + # Maintain dependencies for GitHub Actions + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" +``` + ## How can I help? All kinds of contributions are welcome :raised_hands:! The most basic way to show your support is to star :star2: the project, or to raise issues :speech_balloon: You can also support this project by [**becoming a sponsor on GitHub**](https://github.com/sponsors/crazy-max) :clap: or by making a [Paypal donation](https://www.paypal.me/crazyws) to ensure this journey continues indefinitely! :rocket: