Skip to content

Disable GitHub Actions dependency updates - #1264

Merged
kodiakhq[bot] merged 1 commit into
sourcefrom
ADobin-patch-1
Aug 25, 2025
Merged

kodiakhq[bot] merged 1 commit into
sourcefrom
ADobin-patch-1

Conversation

@ADobin

@ADobin ADobin commented Aug 25, 2025

Copy link
Copy Markdown
Owner

Comment out GitHub Actions dependency configuration. This is currently breaking Matrix and I don't have time at the moment to fix the action to create my own deployment file.

Comment out GitHub Actions dependency configuration. This is currently breaking Matrix and I don't have time at the moment to fix the action to create my own deployment file.
@ADobin ADobin added the ship it! Triggers automation for completing PRs for dependencies label Aug 25, 2025
@kodiakhq
kodiakhq Bot merged commit 964364c into source Aug 25, 2025
7 checks passed
@kodiakhq
kodiakhq Bot deleted the ADobin-patch-1 branch August 25, 2025 19:13
ADobin added a commit that referenced this pull request Aug 27, 2026
- Use npm ci in CI for reproducible installs from the lockfile
- Drop the prettier/typescript-eslint Dependabot groups for dependencies
  that no longer exist, and note why github-actions updates stay
  disabled (#1264)
- Remove SvelteKit-era entries from .gitignore and .vscode/settings.json
- Document npm ci and .node-version in the README
ADobin added a commit that referenced this pull request Aug 27, 2026
…#1299)

- Use npm ci in CI for reproducible installs from the lockfile
- Drop the prettier/typescript-eslint Dependabot groups for dependencies
  that no longer exist, and note why github-actions updates stay
  disabled (#1264)
- Remove SvelteKit-era entries from .gitignore and .vscode/settings.json
- Document npm ci and .node-version in the README
ADobin added a commit that referenced this pull request Aug 27, 2026
…rtifact (#1301)

actions/upload-pages-artifact v4.0.0 started excluding dotfiles from the
Pages artifact, which silently dropped .well-known/matrix/{client,server}
and broke Matrix delegation for alexdobin.com (#1261, #1263). Actions
updates were disabled in #1264 as a result.

v5.0.0 adds an include-hidden-files input that restores them. Enable it,
and add a guard that inspects the generated tarball so a future change
that drops the .well-known files fails the build instead of deploying.

With the root cause fixed, re-enable Dependabot for GitHub Actions
(weekly).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ship it! Triggers automation for completing PRs for dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant