Merge pull request #2519 from ligangty/master

Add dependabot and update some github action versions

Author: ligangty

.github/dependabot.yml

@@ -0,0 +1,21 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+version: 2
+updates:
+  - package-ecosystem: "maven" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"
+    ignore:
+      - dependency-name: "*"
+        update-types:
+          - "version-update:semver-major"
+          - "version-update:semver-minor"
+
+  - package-ecosystem: "github-actions" # Also update Github actions
+    directory: "/"
+    schedule:
+      # Check for updates to GitHub Actions every week
+      interval: "weekly"

.github/workflows/maven-push.yml

@@ -30,17 +30,17 @@ jobs:
       SKIP_NPM_CONFIG: false
       NPMREGISTRY: https://registry.npmjs.org
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
 
     - name: Set up JDK 11 for x64
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v5
       with:
         distribution: 'temurin'
         architecture: x64
         java-version: |
           11
 
-    - uses: s4u/maven-settings-action@v3.1.0
+    - uses: s4u/maven-settings-action@v4.0.0
       with:
         servers: |
           [{
@@ -56,7 +56,7 @@ jobs:
 #      run: mvn help:effective-settings -B -V -DskipTests=true -DskipNpmConfig=false deploy -e --global-toolchains .github/workflows/toolchains.xml
 
     - name: Checkout tools repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         repository: Commonjava/commonjava-images
         path: commonjava-images

.github/workflows/maven-verify.yml

@@ -31,17 +31,17 @@ jobs:
       SKIP_NPM_CONFIG: false
       NPMREGISTRY: https://registry.npmjs.org
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
 
     - name: Set up JDK 11 for x64
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v5
       with:
         distribution: 'temurin'
         architecture: x64
         java-version: |
           11
 
-    - uses: s4u/maven-settings-action@v2.8.0
+    - uses: s4u/maven-settings-action@v4.0.0
       with:
         sonatypeSnapshots: true