diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000000..af79ec28bc --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,21 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates +version: 2 +updates: + - package-ecosystem: "maven" # See documentation for possible values + directory: "/" # Location of package manifests + schedule: + interval: "weekly" + ignore: + - dependency-name: "*" + update-types: + - "version-update:semver-major" + - "version-update:semver-minor" + + - package-ecosystem: "github-actions" # Also update Github actions + directory: "/" + schedule: + # Check for updates to GitHub Actions every week + interval: "weekly" diff --git a/.github/workflows/maven-push.yml b/.github/workflows/maven-push.yml index 525340b798..c44c0e0ada 100644 --- a/.github/workflows/maven-push.yml +++ b/.github/workflows/maven-push.yml @@ -30,17 +30,17 @@ jobs: SKIP_NPM_CONFIG: false NPMREGISTRY: https://registry.npmjs.org steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Set up JDK 11 for x64 - uses: actions/setup-java@v3 + uses: actions/setup-java@v5 with: distribution: 'temurin' architecture: x64 java-version: | 11 - - uses: s4u/maven-settings-action@v3.1.0 + - uses: s4u/maven-settings-action@v4.0.0 with: servers: | [{ @@ -56,7 +56,7 @@ jobs: # run: mvn help:effective-settings -B -V -DskipTests=true -DskipNpmConfig=false deploy -e --global-toolchains .github/workflows/toolchains.xml - name: Checkout tools repo - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: repository: Commonjava/commonjava-images path: commonjava-images diff --git a/.github/workflows/maven-verify.yml b/.github/workflows/maven-verify.yml index f154faa0bb..455bfbbb17 100644 --- a/.github/workflows/maven-verify.yml +++ b/.github/workflows/maven-verify.yml @@ -31,17 +31,17 @@ jobs: SKIP_NPM_CONFIG: false NPMREGISTRY: https://registry.npmjs.org steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Set up JDK 11 for x64 - uses: actions/setup-java@v3 + uses: actions/setup-java@v5 with: distribution: 'temurin' architecture: x64 java-version: | 11 - - uses: s4u/maven-settings-action@v2.8.0 + - uses: s4u/maven-settings-action@v4.0.0 with: sonatypeSnapshots: true