From 1d5e1b5abcf9405cc204d34ef52af415e3fcb03e Mon Sep 17 00:00:00 2001 From: Katie Mulliken Date: Sat, 7 Dec 2024 22:11:48 -0500 Subject: [PATCH 1/2] Create dependabot.yml --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..5555a11 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,8 @@ +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "pip" # See documentation for possible values + directory: "/" # Location of package manifests + schedule: + interval: "weekly" From 05122c8b54ae181fcf3844fcd7333027124f86d3 Mon Sep 17 00:00:00 2001 From: Katie Mulliken Date: Sat, 7 Dec 2024 22:18:07 -0500 Subject: [PATCH 2/2] Update codeql.yml --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 3899b69..08ac381 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -36,7 +36,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).