ci(dependabot): explicitly scan directory with composite actions

Dependabot completely ignored composite actions since they doesn't follow the conventional directory structure for storing .yml files. As a workaround, we have to explicitly instruct Dependabot to scan the directory with .yml files. Ref: dependabot/dependabot-core#6704 Signed-off-by: iusmac <[email protected]>
iusmac · Dec 6, 2024 · 186c09b · 186c09b
1 parent af91b20
commit 186c09b
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -6,7 +6,9 @@
 version: 2
 updates:
   - package-ecosystem: github-actions
-    directory: "/"
+    directories:
+      - "/"
+      - "/.github/actions/*/"
     schedule:
       interval: weekly
       day: sunday