From 3025c9910da8d4cec35be9917daf7fa5c101c319 Mon Sep 17 00:00:00 2001 From: "Paulo F. Oliveira" Date: Fri, 30 May 2025 02:53:21 +0100 Subject: [PATCH] Dependabot version updates (#340) * yamllint for newer file * Allow for proper, lower-level, pinning Makes for increased reproducibility (and overall control) --- .github/dependabot.yml | 11 ++++++++++ .github/workflows/action.yml | 22 +++++++++---------- .github/workflows/hexpm-mirrors.yml | 2 +- .github/workflows/macos.yml | 4 ++-- .github/workflows/ubuntu.yml | 4 ++-- .../workflows/update_3rd_party_licenses.yml | 2 +- .github/workflows/windows.yml | 4 ++-- package.json | 2 +- .../gleamgleam/.github/workflows/test.yml | 2 +- 9 files changed, 32 insertions(+), 21 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..c22a874 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +--- +version: 2 +updates: +- package-ecosystem: npm + directory: / + schedule: + interval: weekly +- package-ecosystem: github-actions + directory: / + schedule: + interval: weekly diff --git a/.github/workflows/action.yml b/.github/workflows/action.yml index f89f31c..1c560a3 100644 --- a/.github/workflows/action.yml +++ b/.github/workflows/action.yml @@ -24,7 +24,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - name: Version it! run: | # We expect a string such as const setupBeamVersion = 'undefined' in the code @@ -45,8 +45,8 @@ jobs: runs-on: ubuntu-latest if: github.ref != 'refs/heads/main' steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v4.2.2 + - uses: actions/setup-node@v4.4.0 with: node-version: '20' - run: npm run build-dist @@ -58,15 +58,15 @@ jobs: runs-on: ubuntu-latest if: github.ref != 'refs/heads/main' steps: - - uses: actions/checkout@v4 - - uses: raven-actions/actionlint@v2 + - uses: actions/checkout@v4.2.2 + - uses: raven-actions/actionlint@v2.0.1 unit_tests_ubuntu: name: Unit tests (Ubuntu) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v4.2.2 + - uses: actions/setup-node@v4.4.0 with: node-version: '20' - run: npm ci @@ -83,8 +83,8 @@ jobs: name: Unit tests (Windows) runs-on: windows-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v4.2.2 + - uses: actions/setup-node@v4.4.0 with: node-version: '20' - run: npm install --production @@ -94,8 +94,8 @@ jobs: name: Unit tests (macOS) runs-on: macos-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v4.2.2 + - uses: actions/setup-node@v4.4.0 with: node-version: '20' - run: npm ci diff --git a/.github/workflows/hexpm-mirrors.yml b/.github/workflows/hexpm-mirrors.yml index da65c0d..cddad02 100644 --- a/.github/workflows/hexpm-mirrors.yml +++ b/.github/workflows/hexpm-mirrors.yml @@ -26,7 +26,7 @@ jobs: install-rebar: [true, false] install-hex: [true, false] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - name: Use erlef/setup-beam id: setup-beam uses: ./ diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml index 44823a0..95bd52f 100644 --- a/.github/workflows/macos.yml +++ b/.github/workflows/macos.yml @@ -71,7 +71,7 @@ jobs: rebar3-version: 'latest' os: 'macos-latest' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - name: Use erlef/setup-beam id: setup-beam uses: ./ @@ -124,7 +124,7 @@ jobs: rebar3-version: nightly os: macos-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - name: Use erlef/setup-beam id: setup-beam uses: ./ diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml index a01d72e..b272b00 100644 --- a/.github/workflows/ubuntu.yml +++ b/.github/workflows/ubuntu.yml @@ -83,7 +83,7 @@ jobs: escript_script: 'protoc-gen-elixir --version' os: 'ubuntu-latest' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - name: Use erlef/setup-beam id: setup-beam uses: ./ @@ -151,7 +151,7 @@ jobs: rebar3-version: nightly os: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - name: Use erlef/setup-beam id: setup-beam uses: ./ diff --git a/.github/workflows/update_3rd_party_licenses.yml b/.github/workflows/update_3rd_party_licenses.yml index 627df10..352ea39 100644 --- a/.github/workflows/update_3rd_party_licenses.yml +++ b/.github/workflows/update_3rd_party_licenses.yml @@ -14,7 +14,7 @@ jobs: name: Update 3rd party licenses runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - run: ./.github/workflows/update_3rd_party_licenses.sh env: diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index ebfcbd8..3a1922d 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -64,7 +64,7 @@ jobs: escript_script: 'protoc-gen-elixir --version' os: 'windows-latest' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - name: Use erlef/setup-beam id: setup-beam uses: ./ @@ -131,7 +131,7 @@ jobs: rebar3-version: nightly os: windows-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - name: Use erlef/setup-beam id: setup-beam uses: ./ diff --git a/package.json b/package.json index ed4f88a..0d604f8 100644 --- a/package.json +++ b/package.json @@ -10,7 +10,7 @@ "markdownlint": "markdownlint *.md ./github/**/*.md", "shellcheck": "shellcheck .github/workflows/*.sh", "test": "node --test --test-reporter=spec", - "yamllint": "eslint .github/workflows/**.yml .*.yml *.yml", + "yamllint": "eslint .github/workflows/**.yml .github/*.yml .*.yml *.yml", "clean-dist": "rm -rf ./dist", "lint": "npm run markdownlint && npm run shellcheck && npm run yamllint && npm run eslint", "build-dist": "npm run clean-dist && npm install && npm run build && npm run format && npm run lint" diff --git a/test/projects/gleamgleam/.github/workflows/test.yml b/test/projects/gleamgleam/.github/workflows/test.yml index 3f0c45b..999287e 100644 --- a/test/projects/gleamgleam/.github/workflows/test.yml +++ b/test/projects/gleamgleam/.github/workflows/test.yml @@ -11,7 +11,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v4.2.2 - uses: erlef/setup-beam@v1 with: otp-version: "26.0.2"