r7kamura/dependabot-bundler-conservative

Update Dependabot's pull request for bundler with `--conservative` option.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Jan 7, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: r7kamura/dependabot-bundler-conservative@6a1fc43648c4e326a6936443fdbf651b1f55a5e6 # v0.2.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
github-tokenGitHub access token (See README for required permissions).yes

no outputs