From 1c86f1a209e621772ac24ee0ce89252a04a39431 Mon Sep 17 00:00:00 2001 From: Brady Holt Date: Tue, 25 Aug 2026 08:20:39 -0500 Subject: [PATCH] Allow major version updates for GitHub Actions The semver-minor/patch allow list was meant to keep major package bumps out of the PR queue, but it applied to the github-actions ecosystem too. Action majors are low risk and worth taking promptly, so drop the allow list there and let Dependabot propose them. The pip restriction stays. --- .github/dependabot.yml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9b86a2e..36df29d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -25,8 +25,3 @@ updates: open-pull-requests-limit: 3 cooldown: default-days: 7 - allow: - - dependency-name: "*" - update-types: - - "version-update:semver-minor" - - "version-update:semver-patch"