We’ve talked about Dependabot a few times on this blog, but this week I discovered you can also use it keep your GitHub Actions up to date, and setup is easy.
In your Dependabot configuration file, you only need to add these lines:
- package-ecosystem: "github-actions" directory: "/" schedule: interval: "daily"
On a daily basis, Dependabot will now run, and check if any of my Actions have updates, and create a PR. Just another way to keep not only your code, but your workflows, up to date.