From 41f05d3317ffb49e4bf5a2dd03fa0cbca40532a9 Mon Sep 17 00:00:00 2001
From: Richard Levasseur <richardlev@gmail.com>
Date: Wed, 21 Oct 2026 23:20:05 -0700
Subject: [PATCH] workflows: update actions/github-script to v9

GitHub Actions deprecated Node.js 20 and warns when running
actions/github-script@v7 in the setup-bazel composite action. Bump
actions/github-script to v9 (which targets Node.js 24) and add the
composite action directory to Dependabot so future action updates are
tracked automatically.
---
 .github/actions/setup-bazel/action.yaml | 2 +-
 .github/dependabot.yml                  | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/actions/setup-bazel/action.yaml b/.github/actions/setup-bazel/action.yaml
index 2938ca3515..f277f236be 100644
--- a/.github/actions/setup-bazel/action.yaml
+++ b/.github/actions/setup-bazel/action.yaml
@@ -52,7 +52,7 @@ runs:
     # process tables and child environments.
     - name: Write secret to user.bazelrc
       if: ${{ runner.os == 'Linux' && inputs.buildbuddy_api_key != '' }}
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       with:
         script: |
           const fs = require('fs');
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5733fc1d6d..8aa2155bc2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,7 +3,9 @@ version: 2
 updates:
   # Maintain dependencies for GitHub Actions
   - package-ecosystem: "github-actions"
-    directory: "/"
+    directories:
+      - "/"
+      - "/.github/actions/setup-bazel"
     schedule:
       interval: "weekly"