From 0ae4c013c4bc5b02700b68e200665d64510b51c7 Mon Sep 17 00:00:00 2001 From: qlrd <106913782+qlrd@users.noreply.github.com> Date: Mon, 27 Nov 2023 17:13:41 -0300 Subject: [PATCH 1/2] added a dependabot to check for updates on pip packages and github actions --- .github/dependabot.yml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..59976ca0e --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,26 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates + +version: 2 + +updates: + + # Maintain dependencies for GitHub Actions. + # Dependabot will raise pull requests + # for version updates for any outdated actions that it finds. + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "sunday" + + # Maintain dependencies for python packages. + # Dependabot will raise pull requests + # for version updates for any outdated package that it finds. + - package-ecosystem: "pip" + directory: "/" + schedule: + interval: "weekly" + From 858b4e97bbbe587a36304c002a06173985557d9b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Nov 2023 20:25:59 +0000 Subject: [PATCH 2/2] Bump shrink/actions-docker-extract from 2 to 3 Bumps [shrink/actions-docker-extract](https://github.com/shrink/actions-docker-extract) from 2 to 3. - [Release notes](https://github.com/shrink/actions-docker-extract/releases) - [Commits](https://github.com/shrink/actions-docker-extract/compare/v2...v3) --- updated-dependencies: - dependency-name: shrink/actions-docker-extract dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 3d94f0b60..2207c86df 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -48,7 +48,7 @@ jobs: - name: Extract firmware for M5StickV id: extract-m5stickv if: matrix.device == 'maixpy_m5stickv' - uses: shrink/actions-docker-extract@v2 + uses: shrink/actions-docker-extract@v3 with: image: localhost:5000/selfcustody/krux-builder-m5stickv:latest path: /src/firmware/Kboot/build/. @@ -72,7 +72,7 @@ jobs: - name: Extract firmware for Amigo IPS id: extract-amigo-ips if: matrix.device == 'maixpy_amigo_ips' - uses: shrink/actions-docker-extract@v2 + uses: shrink/actions-docker-extract@v3 with: image: localhost:5000/selfcustody/krux-builder-amigo-ips:latest path: /src/firmware/Kboot/build/. @@ -96,7 +96,7 @@ jobs: - name: Extract firmware for Amigo TFT id: extract-amigo-tft if: matrix.device == 'maixpy_amigo_tft' - uses: shrink/actions-docker-extract@v2 + uses: shrink/actions-docker-extract@v3 with: image: localhost:5000/selfcustody/krux-builder-amigo-tft:latest path: /src/firmware/Kboot/build/. @@ -120,7 +120,7 @@ jobs: - name: Extract firmware for Bit id: extract-bit if: matrix.device == 'maixpy_bit' - uses: shrink/actions-docker-extract@v2 + uses: shrink/actions-docker-extract@v3 with: image: localhost:5000/selfcustody/krux-builder-bit:latest path: /src/firmware/Kboot/build/. @@ -144,7 +144,7 @@ jobs: - name: Extract firmware for Dock id: extract-dock if: matrix.device == 'maixpy_dock' - uses: shrink/actions-docker-extract@v2 + uses: shrink/actions-docker-extract@v3 with: image: localhost:5000/selfcustody/krux-builder-dock:latest path: /src/firmware/Kboot/build/.