diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..2d05f2d --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,19 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: maven + directories: + - "**/*" + schedule: + interval: weekly + commit-message: + prefix: "Maven" + reviewers: + - "owenkellett" + - "spaltis" + - "ashishKhushiKumar" + - "anishb266" diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000..4cd15c1 --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,14 @@ +name: 'Dependency Review' +on: [pull_request] + +permissions: + contents: read + +jobs: + dependency-review: + runs-on: ubuntu-latest + steps: + - name: 'Checkout Repository' + uses: actions/checkout@v4 + - name: 'Dependency Review' + uses: actions/dependency-review-action@v4.7.1 \ No newline at end of file diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index b702dc6..65d84bf 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -1,23 +1,25 @@ name: Run AAA SDK CI -on: [push, pull_request, workflow_dispatch] +on: [push, workflow_dispatch] jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - name: 'Checkout Repository' + uses: actions/checkout@v4.2.2 - name: Cache local Maven repository - uses: actions/cache@v2 + uses: actions/cache@v4.2.3 with: path: $HOME/.m2 key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }} restore-keys: | ${{ runner.os }}-maven- - name: Setup Java - uses: actions/setup-java@v1 + uses: actions/setup-java@v4.7.1 with: java-version: '8' + distribution: 'zulu' - name: Verify Maven installation run: mvn -v - name: Run AAA SDK tests