From 21085451f9189fe721e152d0105018f26dcaede3 Mon Sep 17 00:00:00 2001 From: Sandhya Adavikolanu Date: Sat, 7 Mar 2026 20:15:38 -0800 Subject: [PATCH 1/2] Update qcom-preflight-checks.yml Signed-off-by: Sandhya Adavikolanu Signed-off-by: Sandhya Adavikolanu --- .github/workflows/qcom-preflight-checks.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/qcom-preflight-checks.yml b/.github/workflows/qcom-preflight-checks.yml index 0dd44ecd7..d17a3fffb 100644 --- a/.github/workflows/qcom-preflight-checks.yml +++ b/.github/workflows/qcom-preflight-checks.yml @@ -21,4 +21,4 @@ jobs: pr-check-emails: true # default: true dependency-review: true # default: true secrets: - SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} \ No newline at end of file + SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} From 3a0c56826057d1debc75e825d32fc74cdae4f33e Mon Sep 17 00:00:00 2001 From: Sandhya Adavikolanu Date: Sat, 7 Mar 2026 20:53:33 -0800 Subject: [PATCH 2/2] Create dependabot.yaml Rename dependabots.yaml to dependabot.yaml Renamed `.github/dependabots.yaml` to `.github/dependabot.yml` to follow the required GitHub naming convention. This ensures Dependabot can detect and apply security and version updates correctly. Signed-off-by: Sandhya Adavikolanu Signed-off-by: Sandhya Adavikolanu --- .github/dependabot.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 .github/dependabot.yaml diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml new file mode 100644 index 000000000..13150bcfe --- /dev/null +++ b/.github/dependabot.yaml @@ -0,0 +1,11 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "github-actions" # See documentation for possible values + directory: "/" # This points to .github/workflows + schedule: + interval: "daily"