potiuk opened a new pull request, #1467: URL: https://github.com/apache/airflow-site/pull/1467
## Summary - Remove octopin pre-commit hook — dependabot `github-actions` ecosystem now handles action version pinning - Remove `upgrade.yml` workflow — replaced by dependabot `pre-commit` and `github-actions` ecosystems - Add dependabot `pre-commit` ecosystem for hook updates (weekly, grouped) - Add cooldown (4 days) to `github-actions` dependabot ecosystem - Fix zizmor `secrets-outside-env` finding in `build.yml` All dependabot ecosystems are grouped so updates come as single PRs. ## Test plan - [ ] Verify dependabot creates grouped PRs for pre-commit hook updates - [ ] Verify dependabot creates grouped PRs for GitHub Actions updates - [ ] Verify zizmor pre-commit hook passes on all workflow files 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
