From f8439dca2625f61c146a519d4675292d1c363675 Mon Sep 17 00:00:00 2001 From: Pear <20259871+TheRealPear@users.noreply.github.com> Date: Mon, 29 Jul 2024 01:58:25 -0400 Subject: [PATCH 1/3] Update Action workflows to resolve deprecation --- .github/dependabot.yml | 16 ++++++++++++++++ .github/workflows/build.yml | 14 +++++++------- .github/workflows/codacy-analysis.yml | 8 ++++---- 3 files changed, 27 insertions(+), 11 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..a1b8faa --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,16 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "gradle" + directory: "/" + schedule: + interval: "weekly" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 3728964..84d4eb2 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -6,19 +6,19 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 - - name: Set up JDK 17 + - uses: actions/checkout@v4 + - name: Set up JDK uses: actions/setup-java@v4 with: java-version: '17' distribution: temurin cache: gradle + - name: Set up Gradle + uses: gradle/actions/setup-gradle@v3 - name: Build with Gradle - uses: gradle/gradle-build-action@4137be6a8bf7d7133955359dbd952c0ca73b1021 - with: - arguments: shadowJar + run: ./gradlew shadowJar - name: Upload artifact - uses: actions/upload-artifact@v1 + uses: actions/upload-artifact@v4 with: name: Mars - path: build/libs/Mars-1.0-SNAPSHOT-all.jar + path: build/libs/Mars-1.0-SNAPSHOT-all.jar \ No newline at end of file diff --git a/.github/workflows/codacy-analysis.yml b/.github/workflows/codacy-analysis.yml index 589a849..d64d6de 100644 --- a/.github/workflows/codacy-analysis.yml +++ b/.github/workflows/codacy-analysis.yml @@ -29,11 +29,11 @@ jobs: steps: # Checkout the repository to the GitHub Actions runner - name: Checkout code - uses: actions/checkout@v2 + uses: actions/checkout@v4 # Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis - name: Run Codacy Analysis CLI - uses: codacy/codacy-analysis-cli-action@d840f886c4bd4edc059706d09c6a1586111c540b + uses: codacy/codacy-analysis-cli-action@master with: # Check https://github.com/codacy/codacy-analysis-cli#project-token to get your project token from your Codacy repository # You can also omit the token and run the tools that support default configurations @@ -49,6 +49,6 @@ jobs: # Upload the SARIF file generated in the previous step - name: Upload SARIF results file - uses: github/codeql-action/upload-sarif@v1 + uses: github/codeql-action/upload-sarif@v3 with: - sarif_file: results.sarif + sarif_file: results.sarif \ No newline at end of file From e5f3cabbb88e386b94f19f2c18922920f124b8fb Mon Sep 17 00:00:00 2001 From: jorgeberrex Date: Sat, 21 Sep 2024 20:21:05 -0500 Subject: [PATCH 2/3] GitHub Actions Artifacts v4 --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 3728964..7a2700b 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -18,7 +18,7 @@ jobs: with: arguments: shadowJar - name: Upload artifact - uses: actions/upload-artifact@v1 + uses: actions/upload-artifact@v4 with: name: Mars path: build/libs/Mars-1.0-SNAPSHOT-all.jar From 0fdf132dde6fa5c5985485a047d2a5f863d13f32 Mon Sep 17 00:00:00 2001 From: jorgeberrex Date: Sat, 21 Sep 2024 23:59:57 -0500 Subject: [PATCH 3/3] Remove dependabot --- .github/dependabot.yml | 16 ---------------- 1 file changed, 16 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index a1b8faa..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,16 +0,0 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file - -version: 2 -updates: - - package-ecosystem: "gradle" - directory: "/" - schedule: - interval: "weekly" - - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "weekly"