From e7407301d97f273cf199ddb6728bfaa5961828e8 Mon Sep 17 00:00:00 2001 From: Martin Hutchinson Date: Wed, 5 Jun 2024 15:35:19 +0100 Subject: [PATCH] Update dependabot weekly instead of daily Also bump version of go used by vulnerability scanner --- .github/dependabot.yml | 4 ++-- .github/workflows/govulncheck.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c00748e..6f14a84 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,7 +7,7 @@ updates: patterns: - "*" schedule: - interval: daily + interval: weekly commit-message: prefix: ":seedling:" include: "scope" @@ -19,7 +19,7 @@ updates: patterns: - "*" schedule: - interval: daily + interval: weekly commit-message: prefix: ":seedling:" include: "scope" diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml index 1e6d6aa..8043dd5 100644 --- a/.github/workflows/govulncheck.yml +++ b/.github/workflows/govulncheck.yml @@ -19,5 +19,5 @@ jobs: - id: govulncheck uses: golang/govulncheck-action@dd0578b371c987f96d1185abb54344b44352bd58 # v1.0.3 with: - go-version-input: 1.20.8 - go-package: ./... \ No newline at end of file + go-version-input: 1.21.11 + go-package: ./...