Skip to content

Sync repo templates ⚙#1261

Merged
travier merged 1 commit intocoreos:mainfrom
coreosbot-releng:repo-templates
Feb 6, 2026
Merged

Sync repo templates ⚙#1261
travier merged 1 commit intocoreos:mainfrom
coreosbot-releng:repo-templates

Conversation

@coreosbot-releng
Copy link

@coreosbot-releng coreosbot-releng commented Feb 6, 2026

Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This automated pull request syncs repository templates, and in doing so, removes the Dependabot configuration for GitHub Actions. This will prevent automated updates for actions, which is a potential security and maintenance concern. I've added a high-severity comment to question this change and understand the go-forward strategy for keeping actions up-to-date.

I am having trouble creating individual review comments. Click here to see my feedback.

.github/dependabot.yml (10-19)

high

Removing the github-actions ecosystem from Dependabot configuration will prevent automated updates for GitHub Actions used in this repository. This can lead to the use of outdated actions with potential security vulnerabilities. Is this change intentional? If so, it would be helpful to understand the new strategy for maintaining action dependencies.

@travier travier added the skip-notes This PR does not need release notes label Feb 6, 2026
@travier travier enabled auto-merge February 6, 2026 17:03
@travier travier merged commit c95077f into coreos:main Feb 6, 2026
10 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip-notes This PR does not need release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants