Bump actions/checkout from 3.6.0 to 4.1.7 (#6)

* Bump actions/checkout from 3.6.0 to 4.1.7 Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com> * Update action.yml Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com> --------- Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
prometheus · Aug 22, 2024 · 69ee4ea · 69ee4ea
1 parent 4516632
commit 69ee4ea
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -1,5 +1,10 @@
 version: 2
 updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: "weekly"
+
   - package-ecosystem: github-actions
     directory: actions/restore_artifacts
     schedule:

diff --git a/action.yml b/action.yml
@@ -3,8 +3,8 @@ description: An action used by the Prometheus project to share github actions.
 runs:
   using: composite
   steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with:
         repository: 'prometheus/promci'
         path: '.github/promci'
-        ref: v0.0.2
+        ref: v0.3.0