From b8438c59cf230b87a9e63c3feb918a179c1edfd0 Mon Sep 17 00:00:00 2001 From: aparnajyothi-y <147696841+aparnajyothi-y@users.noreply.github.com> Date: Tue, 29 Jul 2025 12:06:45 +0530 Subject: [PATCH 01/10] Update dependabot.yml --- .github/dependabot.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 853bc0a13..bc993e209 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -11,7 +11,7 @@ updates: directory: '/' # Check the npm registry for updates every day (weekdays) schedule: - interval: 'weekly' + interval: 'daily' # Enable version updates for GitHub Actions - package-ecosystem: 'github-actions' @@ -19,4 +19,4 @@ updates: # You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`. directory: '/' schedule: - interval: 'weekly' + interval: 'daily' From 640f150959e3f0b7b4d4c9b6927fede68494356a Mon Sep 17 00:00:00 2001 From: aparnajyothi-y <147696841+aparnajyothi-y@users.noreply.github.com> Date: Tue, 29 Jul 2025 12:09:09 +0530 Subject: [PATCH 02/10] Update dependabot.yml --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bc993e209..d7fddade6 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,7 +3,7 @@ # Please see the documentation for all configuration options: # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file -version: 2 +version: 3 updates: # Enable version updates for npm - package-ecosystem: 'npm' From 59ca4daa316696d23e72aef453b2d3b614faf3ac Mon Sep 17 00:00:00 2001 From: aparnajyothi-y <147696841+aparnajyothi-y@users.noreply.github.com> Date: Tue, 29 Jul 2025 12:09:30 +0530 Subject: [PATCH 03/10] Update dependabot.yml --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d7fddade6..bc993e209 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,7 +3,7 @@ # Please see the documentation for all configuration options: # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file -version: 3 +version: 2 updates: # Enable version updates for npm - package-ecosystem: 'npm' From 882d464547f2ba094d336050d71806a86be3dc2e Mon Sep 17 00:00:00 2001 From: aparnajyothi-y <147696841+aparnajyothi-y@users.noreply.github.com> Date: Tue, 29 Jul 2025 12:12:12 +0530 Subject: [PATCH 04/10] Update dependabot.yml --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bc993e209..d7fddade6 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,7 +3,7 @@ # Please see the documentation for all configuration options: # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file -version: 2 +version: 3 updates: # Enable version updates for npm - package-ecosystem: 'npm' From f432b9eede0bd0722994dae23ab761491ff9a7c9 Mon Sep 17 00:00:00 2001 From: aparnajyothi-y <147696841+aparnajyothi-y@users.noreply.github.com> Date: Tue, 29 Jul 2025 12:12:39 +0530 Subject: [PATCH 05/10] Update dependabot.yml --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d7fddade6..bc993e209 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,7 +3,7 @@ # Please see the documentation for all configuration options: # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file -version: 3 +version: 2 updates: # Enable version updates for npm - package-ecosystem: 'npm' From c8c8666bec24d0557e8acc876144d21f0834b83a Mon Sep 17 00:00:00 2001 From: aparnajyothi-y <147696841+aparnajyothi-y@users.noreply.github.com> Date: Tue, 29 Jul 2025 12:24:28 +0530 Subject: [PATCH 06/10] Update dependabot.yml --- .github/dependabot.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bc993e209..932b6a357 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -11,7 +11,7 @@ updates: directory: '/' # Check the npm registry for updates every day (weekdays) schedule: - interval: 'daily' + interval: 'Weekly' # Enable version updates for GitHub Actions - package-ecosystem: 'github-actions' @@ -19,4 +19,4 @@ updates: # You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`. directory: '/' schedule: - interval: 'daily' + interval: 'Weekly' From 35df57196da60fa3e9f302dc0700feac76d5ee56 Mon Sep 17 00:00:00 2001 From: aparnajyothi-y <147696841+aparnajyothi-y@users.noreply.github.com> Date: Tue, 29 Jul 2025 13:47:18 +0530 Subject: [PATCH 07/10] Update dependabot.yml --- .github/dependabot.yml | 26 ++++++++++++++++---------- 1 file changed, 16 insertions(+), 10 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 932b6a357..cbdc555a9 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,22 +1,28 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file +# Basic `dependabot.yml` file with +# minimum configuration for three package managers version: 2 updates: # Enable version updates for npm - - package-ecosystem: 'npm' + - package-ecosystem: "npm" # Look for `package.json` and `lock` files in the `root` directory - directory: '/' + directory: "/" # Check the npm registry for updates every day (weekdays) schedule: - interval: 'Weekly' + interval: "daily" + + # Enable version updates for Docker + - package-ecosystem: "docker" + # Look for a `Dockerfile` in the `root` directory + directory: "/" + # Check for updates once a week + schedule: + interval: "daily" # Enable version updates for GitHub Actions - - package-ecosystem: 'github-actions' + - package-ecosystem: "github-actions" # Workflow files stored in the default location of `.github/workflows` # You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`. - directory: '/' + directory: "/" schedule: - interval: 'Weekly' + interval: "daily" From 5b63fe5085a47013a9d6302519434ec3c3bccd3f Mon Sep 17 00:00:00 2001 From: aparnajyothi-y <147696841+aparnajyothi-y@users.noreply.github.com> Date: Tue, 29 Jul 2025 13:47:45 +0530 Subject: [PATCH 08/10] Update dependabot.yml --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index cbdc555a9..b408e2a97 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -25,4 +25,4 @@ updates: # You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`. directory: "/" schedule: - interval: "daily" + interval: "weekly" From e77b9315a28bcd3d90eea7235c1bf6e9214472aa Mon Sep 17 00:00:00 2001 From: Aparna Jyothi Date: Fri, 25 Jul 2025 19:30:53 +0530 Subject: [PATCH 09/10] fix for dependabot alert #27 --- package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package-lock.json b/package-lock.json index 336c19e70..d3335b359 100644 --- a/package-lock.json +++ b/package-lock.json @@ -5751,4 +5751,4 @@ } } } -} +} \ No newline at end of file From d9712a12020feeeebd876fb141f3d082a4f04395 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Sep 2025 21:44:06 +0000 Subject: [PATCH 10/10] Bump actions/publish-action from 0.3.0 to 0.4.0 Bumps [actions/publish-action](https://github.com/actions/publish-action) from 0.3.0 to 0.4.0. - [Commits](https://github.com/actions/publish-action/compare/v0.3.0...v0.4.0) --- updated-dependencies: - dependency-name: actions/publish-action dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/release-new-action-version.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-new-action-version.yml b/.github/workflows/release-new-action-version.yml index e58e9063f..25192b640 100644 --- a/.github/workflows/release-new-action-version.yml +++ b/.github/workflows/release-new-action-version.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Update the ${{ env.TAG_NAME }} tag id: update-major-tag - uses: actions/publish-action@v0.3.0 + uses: actions/publish-action@v0.4.0 with: source-tag: ${{ env.TAG_NAME }} slack-webhook: ${{ secrets.SLACK_WEBHOOK }}