Skip to main content

Is there a way to keep GitHub Actions workflow actions up to date?

If you continue to use an outdated version of an action in your GitHub Actions workflow, the workflow may stop working when the action is deprecated, potentially causing the build to fail.
By using Dependabot, you can keep the actions you use up to date with the latest versions.

You can also check the change log for actions at the link below.
GitHub Changelog - Actions

How to Configure Dependabot

Open [Settings] -> [Security] -> [Code security] on GitHub, and click on "Enable" or "Configure" under Dependabot version updates to move to the YAML file editing screen. Image from Gyazo

If you are using Dependabot for the first time, a template will be displayed. Set package-ecosystem and interval as follows.
If you are already using Dependabot, the contents of the existing .github/dependabot.yml file will be displayed. Please add the following content at the end of the file.

  - package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly" # monthly, weekly or daily

Click on "Commit changes" in the upper right corner to save the settings.

info

For more details on the configuration process, please refer to Keeping your actions up to date with Dependabot in GitHub Docs.

Dealing with Detected Updates

Dependabot automatically checks if there is a newer version available for actions.
If there is a newer version of the action available, a Pull Request will be automatically created. Image from Gyazo

By reviewing the contents of the Pull Request and merging it, you can update the action to the latest version.


Support

If you have any other questions, please contact us or check out Our Slack Community.