菜单
Update GitHub Actions workflow dependencies safely in Torrust Tracker, including synchronizing the Torrust organization allowlist. Use when updating workflow action versions, Dependabot GitHub Actions updates, or allowed-actions settings.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/torrust/torrust-tracker --skill update-github-workflow-actions命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Guide for updating project dependencies in the torrust-tracker project. Covers the manual cargo update workflow including branch creation, running checks, committing, and pushing. Distinguishes trivial updates (Cargo.lock only) from breaking-change updates (code rework needed). Use when updating dependencies, running cargo update, or bumping deps. Triggers on "update dependencies", "cargo update", "update deps", or "bump dependencies".
End-to-end workflow for processing and resolving all Copilot code review suggestions on a pull request in torrust-tracker. Use when asked to handle PR review feedback, process all copilot suggestions, audit and resolve review comments, or manage copilot-generated review threads. Triggers on "process copilot suggestions", "handle all PR feedback", "resolve copilot review", "audit PR suggestions", or "close all copilot comments".
Guide for handling sensitive data (secrets) in this Rust project. NEVER use plain String for API tokens, passwords, or other credentials. Use the current stable secrecy crate's direct secret types to prevent accidental exposure through Debug output, logs, and error messages. Call .expose_secret() only when the actual value is needed. Use when working with credentials, API keys, tokens, passwords, or any sensitive configuration. Triggers on "secret", "API token", "password", "credential", "sensitive data", "secrecy", or "expose secret".
正在显示 SKILL.md
| name | update-github-workflow-actions |
| description | Update GitHub Actions workflow dependencies safely in Torrust Tracker, including synchronizing the Torrust organization allowlist. Use when updating workflow action versions, Dependabot GitHub Actions updates, or allowed-actions settings. |
| metadata | {"author":"torrust","version":"1.0"} |
| semantic-links | {"skill-links":["update-dependencies"],"related-artifacts":[".github/dependabot.yaml",".github/workflows/",".github/skills/dev/maintenance/update-dependencies/SKILL.md","docs/skills/semantic-skill-link-convention.md"]} |
Use this skill to update uses: action references in .github/workflows/.
For Cargo dependency updates, use
.github/skills/dev/maintenance/update-dependencies/SKILL.md instead.
develop or main.torrust/torrust-tracker:develop from a branch in the configured fork remote.develop branch and create a dedicated branch..github/workflows/*.yaml references consistently. Dependabot manages GitHub Actions updates through .github/dependabot.yaml; preserve its explicit version format.owner/action@v2.*.owner/action@v2 tag when Dependabot updates exact versions.uses: reference, including its version.skill-link: update-github-workflow-actions comment near the workflow's top-level metadata and review the related skills when updating the workflow policy.linter yaml, git diff --check, and the relevant repository checks before committing.develop.An error such as "The action owner/action@vX.Y.Z is not allowed" means the organization policy does not match the action reference exactly enough. Check the configured allowed patterns at the organization settings URL above against the workflow's uses: value.
For example, an allowlist entry taiki-e/install-action@v2 does not permit taiki-e/install-action@v2.85.5. Configure taiki-e/install-action@v2.* to allow Dependabot-managed versioned v2 updates.
.github/dependabot.yaml controls automated GitHub Actions update proposals..github/skills/dev/maintenance/update-dependencies/SKILL.md is the corresponding workflow for Cargo dependencies.docs/skills/semantic-skill-link-convention.md defines the required semantic-link syntax.