# ci: add grouped monthly Dependabot updates for workflow actions \(\#229\) · lucenx/codexbar-plasma

[View on GitCafe](https://git.cafe/lucenx/codexbar-plasma/commit/c2abf54908d751b45f0baf6ee0e00c311c5a7241)

Repository: [lucenx/codexbar-plasma](https://git.cafe/lucenx/codexbar-plasma)

Visibility: public

Requested revision: c2abf54908d751b45f0baf6ee0e00c311c5a7241

Requested commit: c2abf54908d751b45f0baf6ee0e00c311c5a7241

Commit: c2abf54908d751b45f0baf6ee0e00c311c5a7241

Tree: 5a458c2f9dcba521abf43fc91b19c60146fb6c7a

Author: Simone

Committer: GitHub

## Message

```
ci: add grouped monthly Dependabot updates for workflow actions (#229)

Workflow actions are pinned by commit SHA, which the repository now enforces,
so nothing updates them without Dependabot. One grouped pull request per month
keeps the pins current without a PR per action, and the `ci` commit prefix
satisfies the `pr-title` check.

Documentation impact: the delivery section records the repository rules that
changed alongside this file - squash-only merges, automatic branch deletion,
auto-merge, the `v*` tag ruleset, and required SHA pinning - so the guide keeps
matching the effective settings.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
```

## Parents

- [d094bbbcbf68631b614e88868b0c0f9a7efad188](https://git.cafe/lucenx/codexbar-plasma/commit/d094bbbcbf68631b614e88868b0c0f9a7efad188?format=markdown)

[Source at this commit](https://git.cafe/lucenx/codexbar-plasma/tree/c2abf54908d751b45f0baf6ee0e00c311c5a7241?format=markdown)