This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-node-xcode.git
The following commit(s) were added to refs/heads/master by this push:
new 3cdce4b chore: action workflow updates & add dependabot (#180)
3cdce4b is described below
commit 3cdce4bb98ac1eb504f0568cad284f73772921aa
Author: エリス <[email protected]>
AuthorDate: Thu Aug 27 17:28:49 2026 +0900
chore: action workflow updates & add dependabot (#180)
* chore(dependabot): add configurations
* chore(workflow): release-audit
* chore(workflow): update actions
* chore(workflow): update test matrix
---
.github/dependabot.yml | 52 +++++++++++++++++++++++++++++++++++++
.github/workflows/ci.yml | 21 +++++++--------
.github/workflows/draft-release.yml | 4 +--
.github/workflows/release-audit.yml | 4 +--
4 files changed, 66 insertions(+), 15 deletions(-)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..609ac46
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,52 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied. See the License for the
+# specific language governing permissions and limitations
+# under the License.
+
+version: 2
+
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ gh-actions-patch-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ - "minor"
+
+ - package-ecosystem: "npm"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ semver-major-days: 14
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ npm-patch:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ npm-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "minor"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6448b83..64f45df 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,12 +35,12 @@ jobs:
security-events: write
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
- - uses:
github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+ - uses:
github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
with:
languages: javascript
queries: security-and-quality
@@ -49,7 +49,7 @@ jobs:
- coverage
- node_modules
- - uses:
github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+ - uses:
github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
test:
name: NodeJS ${{ matrix.node.version }} on ${{ matrix.os }}
@@ -65,20 +65,19 @@ jobs:
# By default, all matching test files are excluded from the coverage
report.
# Only Node.js 22.x requires explicitly declaring test file exclusions.
node:
- - version: 20.x
- options: ''
- - version: 22.x
- options: --test-coverage-exclude=test/**/*.js
- - version: 24.x
- options: ''
+ - version: 20
+ - version: 22
+ options: --test-coverage-exclude="test/**/*.js"
+ - version: 24
+ - version: 26
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: ${{ matrix.node.version }}
diff --git a/.github/workflows/draft-release.yml
b/.github/workflows/draft-release.yml
index d98bbc3..a7a572e 100644
--- a/.github/workflows/draft-release.yml
+++ b/.github/workflows/draft-release.yml
@@ -31,12 +31,12 @@ jobs:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
package-manager-cache: false
diff --git a/.github/workflows/release-audit.yml
b/.github/workflows/release-audit.yml
index 28a6b87..6bceca2 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,7 +34,7 @@ jobs:
runs-on: ubuntu-latest
steps:
# Checkout project
- - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #
v6.0.2
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
@@ -43,7 +43,7 @@ jobs:
- uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd
# v3.0.0
# Setup environment with node
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
