mirror of
https://github.com/zed-industries/zed.git
synced 2024-09-19 10:29:35 +03:00
3246a932ca
This PR updates the Renovate config to pin all GitHub Action versions to SHAs. From the Renovate docs: > The [GitHub Docs, using third-party actions](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions) recommend that you pin third-party GitHub Actions to a full-length commit SHA. > > We recommend pinning all Actions. That's why the helpers:pinGitHubActionDigests preset pins all GitHub Actions. > > For an in-depth explanation why you should pin your Github Actions, read the [Palo Alto Networks blog post about the GitHub Actions worm](https://www.paloaltonetworks.com/blog/prisma-cloud/github-actions-worm-dependencies/). Release Notes: - N/A
18 lines
455 B
JSON
18 lines
455 B
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": [
|
|
"config:recommended",
|
|
":semanticCommitsDisabled",
|
|
":separateMultipleMajorReleases",
|
|
"helpers:pinGitHubActionDigests",
|
|
"group:serdeMonorepo"
|
|
],
|
|
"dependencyDashboard": true,
|
|
"timezone": "America/New_York",
|
|
"schedule": ["after 3pm on Wednesday"],
|
|
"major": {
|
|
"dependencyDashboardApproval": true
|
|
},
|
|
"prFooter": "Release Notes:\n\n- N/A"
|
|
}
|