 Rob Hague
|
04a6dc04c2
|
Harden actions (#1784)
* Harden actions
- Pin remaining actions
- Specify top-level/default `permissions: contents: read` in build.yml
- Set `persist-credentials: false` on checkout
- Add an environment for nuget publish job and use `release` event trigger
- Add dependabot cooldown
* Update .github/workflows/build.yml
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2026-04-12 18:15:16 +02:00 |
|
|
dependabot[bot]
|
16d84d0395
|
Bump test dependencies (#1583)
* Bump coverlet.collector from 6.0.2 to 6.0.4
Bumps [coverlet.collector](https://github.com/coverlet-coverage/coverlet) from 6.0.2 to 6.0.4.
- [Release notes](https://github.com/coverlet-coverage/coverlet/releases)
- [Commits](https://github.com/coverlet-coverage/coverlet/compare/v6.0.2...v6.0.4)
---
updated-dependencies:
- dependency-name: coverlet.collector
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* update test deps
* update test deps
* some fixes
* group dependencies
* analyzer fixes
* just group them all together
* more cleanup
* silent analyzers -> suggestion
* restore constant
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Robert Hague <rh@johnstreetcapital.com>
Co-authored-by: Rob Hague <rob.hague00@gmail.com>
|
2025-02-04 21:58:59 +01:00 |
|
|
mus65
|
301829fd96
|
Configure Dependabot to also update NuGet and GitHub Actions (#1581)
* Configure Dependabot to also update NuGet and GitHub Actions
* ignore some NuGet dependencies
|
2025-02-02 18:41:14 +01:00 |
|
|
Rob Hague
|
bc40d450ef
|
Create dependabot.yml for docker image (#1559)
|
2025-01-03 11:12:46 +01:00 |
|