From e27d47550c67962822641dedba87a8b766630501 Mon Sep 17 00:00:00 2001
From: Sebastian Abrahamsson <sebastian.abrahamsson@gmail.com>
Date: Thu, 15 Oct 2026 19:05:30 +0200
Subject: [PATCH] CI: Dependabot for actions, cancel superseded runs

Dependabot opens one pull request a week with the new releases of the
actions the workflows use. A new push to a branch or pull request cancels
its run of docs, lint and python bridge still in progress; main and tags
keep every run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/dependabot.yml              | 12 ++++++++++++
 .github/workflows/docs.yml          |  6 ++++++
 .github/workflows/lint.yml          |  6 ++++++
 .github/workflows/python_bridge.yml |  6 ++++++
 4 files changed, 30 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..0303592
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,12 @@
+# Keeps the actions used by the workflows up to date: one pull request a week with
+# every new release. Actions referenced by branch, such as ghdl/setup-ghdl@main,
+# are not updated.
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      actions:
+        patterns: ['*']
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 1c87f75..95bed35 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -9,6 +9,12 @@ on:
   pull_request:
   workflow_dispatch:
 
+# A new push cancels the run of the same branch or pull request still in progress.
+# On main and on tags every commit has a group of its own, so every run finishes.
+concurrency:
+  group: ${{ github.workflow }}-${{ (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/')) && github.sha || github.ref }}
+  cancel-in-progress: true
+
 jobs:
 
   docs:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index fa2e4be..eea12c2 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -8,6 +8,12 @@ on:
   pull_request:
   workflow_dispatch:
 
+# A new push cancels the run of the same branch or pull request still in progress.
+# On main and on tags every commit has a group of its own, so every run finishes.
+concurrency:
+  group: ${{ github.workflow }}-${{ (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/')) && github.sha || github.ref }}
+  cancel-in-progress: true
+
 jobs:
 
   lint:
diff --git a/.github/workflows/python_bridge.yml b/.github/workflows/python_bridge.yml
index 406d98a..8a03b48 100644
--- a/.github/workflows/python_bridge.yml
+++ b/.github/workflows/python_bridge.yml
@@ -14,6 +14,12 @@ defaults:
   run:
     shell: bash
 
+# A new push cancels the run of the same branch or pull request still in progress.
+# On main and on tags every commit has a group of its own, so every run finishes.
+concurrency:
+  group: ${{ github.workflow }}-${{ (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/')) && github.sha || github.ref }}
+  cancel-in-progress: true
+
 jobs:
 
 #