actions-marketplace-validations/dependabump

Simple, automatic, dependency updating

Trust Signals

workflow.ymlSHA-pinned

uses: actions-marketplace-validations/atlantis-devs_dependabump@bf97c08d63030a3b2fa649e1a80be1a9ab66fb80 # no releases — HEAD as of 2026-07-13

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
npm-bin	Full path to the npm binary to use while installing deps	yes	npm
private-npm-token	API token for a private npm repository	no	—
private-npm-domain	URL for a private npm repository	no	—
filter	Scope to limit dependency updates by	no	""
reject	Scope to reject dependency updates by	no	""
commit-message	Commit message for dependabump commits	yes	chore(deps): bump all dependencies
base-branch	Base branch for pull requests	yes	main
dependabump-branch	Branch to push dependency updates to	yes	dependencies
dependabump-major-branch	Branch to push major dependency updates to	yes	major-dependencies
commit-author	github username for commit author	yes	dependabump
working-dir	optional path to your npm package.json (if not in repo root)	no	—

no outputs