dangoslen/Dependabot Changelog Helper

"Helps keep your repository uo-to-date when Dependabot updates your dependencies."

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Apr 27, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: dangoslen/dependabot-changelog-helper@291c8cb629d7cd7b57ea065782c435ec2bedb138 # v4.3.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
version"The version to find in the CHANGELOG to add dependabot entries to" yesUNRELEASED
dependencyTool"The tool used to manage dependencies. Possible values are: 'dependabot' and 'renovate'" yesdependabot
changelogPath"The path to the CHANGELOG file to add dependabot entries to" yes./CHANGELOG.md
activationLabels"The labels to activate/run this action. Labels are comma-separated. Each label must be present on the pull request for the action to run." yes""
entryPrefix"The prefix word (after the hyphen) of the changelog entry, for example: '- [entryPrefix] `dependency` from v1.0 to v2.0'" yesBump
sectionHeader"The section header to add the changelog entry under" yesDependencies
sort"How to sort dependency entries in the changelog. Possible values are: 'alpha', and 'none'" yesnone

no outputs