diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e0636e5..3a45a58 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,3 +10,8 @@ updates: commit-message: prefix: "chore" include: "scope" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" diff --git a/.github/workflows/code_ql.yml b/.github/workflows/code_ql.yml index d14dfd3..b6a09af 100644 --- a/.github/workflows/code_ql.yml +++ b/.github/workflows/code_ql.yml @@ -38,7 +38,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 6e665d4..32367d7 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -13,11 +13,13 @@ jobs: node-version: [^16.13, ^18.12, ^20] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - - uses: actions/setup-node@v1 + - uses: actions/setup-node@v3 with: node-version: ${{ matrix.node-version }} + cache: yarn + cache-dependency-path: yarn.lock - name: Yarn install run: yarn install --frozen-lockfile