From d86e6043aac0af193ebb73c1636bc7304b3ff87b Mon Sep 17 00:00:00 2001 From: xxyzz Date: Mon, 8 Sep 2025 17:06:30 +0800 Subject: [PATCH] Update GitHub Actions dependencies and enable Dependabot Dependabot will keep these action dependencies updated with pull requests --- .github/dependabot.yml | 10 ++++++++++ .github/workflows/ci.yml | 6 +++--- .github/workflows/translations.yml | 2 +- 3 files changed, 14 insertions(+), 4 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000000..d57929b9e6 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + groups: + actions: + patterns: + - "*" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7df0a4a3aa..ab28a9a354 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -12,13 +12,13 @@ jobs: os: [ubuntu-latest, macos-latest, windows-latest] steps: - name: Checkout source code - uses: actions/checkout@v3 + uses: actions/checkout@v5 with: fetch-depth: 10 persist-credentials: false - name: Set up Python - uses: actions/setup-python@v3 + uses: actions/setup-python@v6 with: python-version: "3.10" @@ -51,7 +51,7 @@ jobs: pacman -S --noconfirm tar - name: Checkout source code - uses: actions/checkout@master + uses: actions/checkout@v5 with: fetch-depth: 10 diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml index e12d3974c5..1627ae9db5 100644 --- a/.github/workflows/translations.yml +++ b/.github/workflows/translations.yml @@ -21,7 +21,7 @@ jobs: pacman -S --noconfirm tar - name: Checkout source code - uses: actions/checkout@master + uses: actions/checkout@v5 with: fetch-depth: 2 persist-credentials: false