From d90cab2e338a1ce1cd6f023dffdbbcdf3fa98f3f Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Tue, 1 Sep 2026 11:05:55 -0400
Subject: [PATCH] Update Dependabot to scan composite action directories

The github-actions ecosystem only scans .github/workflows and a root
action.yml for a given directory, so composite actions in subdirectories
were never checked for updates.

Signed-off-by: Tim Paine <3105306+timkpaine@users.noreply.github.com>
---
 .github/dependabot.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 72a1ca7..5754440 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,7 +1,16 @@
 version: 2
 updates:
   - package-ecosystem: "github-actions"
-    directory: "/"
+    directories:
+      - "/"
+      - "/download-dist"
+      - "/run-cibuildwheel"
+      - "/setup"
+      - "/setup-cibuildwheel"
+      - "/setup-cibuildwheel-cache"
+      - "/test-sdist"
+      - "/test-wheel"
+      - "/upload-dist"
     schedule:
       interval: "monthly"
     labels: []