github/Bose-SoundTouch
1
0
Fork 0
mirror of https://github.com/gesellix/Bose-SoundTouch.git synced 2026-08-18 00:26:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: group codeql-action sub-actions in Dependabot

Browse Source 
github/codeql-action/init, /analyze and /upload-sarif are separate
Dependabot dependencies but must run on the same version. Without a
group they update in independent PRs that merge at different times,
producing a version mismatch that fails CodeQL. Group them so all
sub-actions bump together in one PR.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Tobias Gesellchen
2026-07-09 21:22:06 +02:00
co-authored by Claude Opus 4.8
parent c20e15df21
commit 00db897c24
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/dependabot.yml
+7
View File
@@ -125,6 +125,13 @@ updates:
allow:
- dependency-type: "all"
groups:
# Group all codeql-action sub-actions (init/analyze/upload-sarif)
# so they bump together. They are separate dependencies to
# Dependabot but must stay on the same version, or CodeQL fails
# with "Loaded a configuration file for version X, but running Y".
codeql-action:
patterns:
- "github/codeql-action*"
# Group actions from the same organization
actions-core:
patterns: