alexwlchan / .github Goto Github PK

This is something I spotted in the HTML-Proofer repo, see https://github.com/gjtorikian/html-proofer/blob/ee2c50e89adb977d56eb919d6dff107ee60490db/.github/dependabot.yml#L3-L9

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: daily
      time: "09:00"
      timezone: "Etc/UTC"
    open-pull-requests-limit: 10

This seems like a useful thing I should add to all of my other repos!

I think it's enough to add the following config in .github/dependabot.yml:

version: 2
updates:
  - package-ecosystem: "pip"
    directory: "/"
    schedule:
      interval: "daily"

I'm getting a warning annotation on repositories where I use actions/setup-python@v4, so I should go ahead and upgrade everything.

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/setup-python@v4. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.

See https://github.com/search?type=code&q=%28org%3AFlickr-Foundation%20OR%20org%3Aalexwlchan%29%20actions/setup-python@v4

While I'm here, it's a good opportunity to add pip caching if I don't already have it.

This is prompted by an article by Andrew Montalenti: https://amontalenti.com/2024/05/28/good-python-software

They are so much faster than pip-tools/black/flake8 that it's hard to argue with using them.

I'm getting a warning annotation on repositories where I use actions/checkout@v2 and actions/checkout@v3 so I should go ahead and upgrade everything.

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.

See https://github.com/search?type=code&q=%28org%3AFlickr-Foundation%20OR%20org%3Aalexwlchan%29%20actions/checkout@v2 and https://github.com/search?type=code&q=%28org%3AFlickr-Foundation%20OR%20org%3Aalexwlchan%29%20actions/checkout@v3