2 commits

Author	SHA1	Message	Date
Yuan Tang	2d2bb701fa	ci: Add dependabot scans for Python deps (#1618) ... # What does this PR do? This PR adds dependabot updates for Python dependencies. In addition: * Consistent weekly schedule on a specific day * Specific commit messages * `open-pull-requests-limit` is intentional to avoid upgrading dependencies that will likely cause regressions. We want to keep the focus here on security updates only Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>	2025-03-17 20:20:31 -07:00
Sébastien Han	e6355bfc3b	ci: enable Dependabot for GitHub Actions (#1470) ... # What does this PR do? Add a Dependabot configuration file (.github/dependabot.yml) to enable automated dependency updates for GitHub Actions. This ensures workflows stay up to date with the latest versions, improving security and reliability. Dependabot is configured to: - Monitor GitHub Actions dependencies. - Check for updates in the workflow directory - Run updates on a daily schedule. Signed-off-by: Sébastien Han <seb@redhat.com>	2025-03-07 12:54:56 -08:00