From 534cb996d9679b5a10b4b1f26043da4ca2f7e50e Mon Sep 17 00:00:00 2001 From: ernolf Date: Mon, 20 Jul 2026 13:31:31 +0200 Subject: [PATCH] ci: hand off workflow-action updates from Dependabot to ncmake Signed-off-by: ernolf --- .github/dependabot.yml | 21 +++++++-------------- 1 file changed, 7 insertions(+), 14 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f6ab86b..e617a06 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,20 +4,13 @@ # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file version: 2 updates: - # GitHub Actions used across the workflow files - - package-ecosystem: github-actions - directory: "/" - schedule: - interval: weekly - commit-message: - prefix: build - include: scope - cooldown: - default-days: 7 - groups: - github-actions: - patterns: - - "*" + # GitHub Actions in .github/workflows/ are intentionally NOT managed by + # Dependabot. Those workflow files are installed and updated from their + # upstream templates by ncmake (`make workflows-update`), which follows + # nextcloud/.github + ncmake. A `github-actions` ecosystem here would fight + # that: it edits the same files, so ncmake flags every managed workflow as + # locally modified and then stops updating them. Do NOT re-add it. + # See ncmake's doc/WORKFLOWS.md. # PHP: the bamarni vendor-bin dev tools - package-ecosystem: composer