chore(dependabot): expand coverage and pin workflows (#579)

- Expand dependabot coverage across Rust subcrates and other ecosystems.

- Group updates per dependency and ignore vendored mimalloc crates.

- Pin GitHub Actions to exact SHAs in existing workflows.
This commit is contained in:
Anand Krishnamoorthi
2026-02-11 17:43:48 -06:00
committed by GitHub
parent 96360fa9d8
commit 8f7ca44bdf
20 changed files with 215 additions and 38 deletions

View File

@@ -1,6 +1,9 @@
# Copyright (c) Microsoft Corporation. All rights reserved.
#
name: publish-java
on: workflow_dispatch
on:
workflow_dispatch:
permissions:
contents: read
@@ -32,7 +35,7 @@ jobs:
os: windows-latest
extension: dll
steps:
- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
with:
fetch-depth: 0
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
@@ -63,7 +66,7 @@ jobs:
runs-on: ubuntu-latest
needs: build
steps:
- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
with:
fetch-depth: 0
- uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0