From 7a4991e1469e637d5f00aa0ad4a9be74a9db923e Mon Sep 17 00:00:00 2001 From: Bart Waardenburg Date: Wed, 21 Oct 2026 19:21:31 +0200 Subject: [PATCH] ci: sign Dependabot repair commits through the App Pins the reusable Dependabot workflow to fallow-rs/.github at f3dedfd7adecda9509dc34ebdfab8018479cd2fd. Repair commits are now signed commits of the App, and only signed commits from Dependabot or the App count as automation. Signed-off-by: Bart Waardenburg --- .github/workflows/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml index 373a475..52c65ee 100644 --- a/.github/workflows/dependabot.yml +++ b/.github/workflows/dependabot.yml @@ -30,7 +30,7 @@ jobs: github.event_name != 'workflow_run' || (github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.event == 'pull_request') - uses: fallow-rs/.github/.github/workflows/dependabot.yml@61a505876dce2775181fb2fb4afe4758794dfcc7 # main + uses: fallow-rs/.github/.github/workflows/dependabot.yml@f3dedfd7adecda9509dc34ebdfab8018479cd2fd # main permissions: actions: write checks: read