How do you configure Dependabot to automatically update GitHub Actions versions in your workflows?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Dependabot reads .github/dependabot.yml to know what to watch — set the ecosystem to 'github-actions' and it handles the rest.
Full explanation below image
Full Explanation
To configure Dependabot for GitHub Actions version updates, create '.github/dependabot.yml' with a configuration entry specifying 'package-ecosystem: "github-actions"' and 'directory: "/"' (where .github/workflows/ is). Dependabot then checks for newer versions of actions used in workflow files and opens PRs to update them. You can configure update schedule (daily, weekly, monthly), target branch, and reviewer assignments. There's no 'Auto-update Actions' toggle in Settings. Adding 'dependabot: true' to workflow files is not a thing. The dedicated dependabot.yml configuration is the only supported method.