# Dependabot version updates. Security updates (the alerts) are a separate repo
# setting and stay on. This keeps the SHA-pinned actions current -- Dependabot
# bumps the pin and its version comment together.
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
groups:
actions:
patterns:
commit-message:
prefix: "ci"