From f119f6a7c389a864d58ff1d6c650313ddde14306 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Tue, 1 Sep 2026 11:05:55 -0400
Subject: [PATCH] Add Dependabot config covering composite action directories

The github-actions ecosystem only scans .github/workflows and a root
action.yml for a given directory, so composite actions in subdirectories
were never checked for updates.

Signed-off-by: Tim Paine <3105306+timkpaine@users.noreply.github.com>
---
 .github/dependabot.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..fc3b9dc
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directories:
+      - "/"
+      - "/setup"
+      - "/setup-vcpkg-cache"
+    schedule:
+      interval: "monthly"
+    labels: []