From 94c48544948e4b8efefb82053fc48fc42b08d6d6 Mon Sep 17 00:00:00 2001 From: Ofer Kozokaro Date: Tue, 23 Jun 2026 18:45:34 -0300 Subject: [PATCH] deps(ci): bump GitHub Actions and add Dependabot - actions/checkout v3 -> v7 - actions/setup-python v4 -> v6 - ncipollo/release-action stays at v1 (already the latest major, v1.21.0) - workflow input defaults: Python 3.12.2 -> 3.12 (resolve latest patch), Poetry 1.8.2 -> 2.4.1 (latest stable) Add .github/dependabot.yml to keep pip (tools), github-actions, and terraform providers/modules updated weekly so the dependency set does not fall behind again. --- .github/dependabot.yml | 24 ++++++++++++++++++++++++ .github/workflows/pre_release.yml | 8 ++++---- .github/workflows/release.yml | 8 ++++---- 3 files changed, 32 insertions(+), 8 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..972a533b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,24 @@ +version: 2 +updates: + # Python CLI (Poetry) + - package-ecosystem: "pip" + directory: "/tools" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + + # GitHub Actions used by the release workflows + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + + # Terraform providers and modules + - package-ecosystem: "terraform" + directories: + - "/platform/terraform/*" + - "/platform/terraform/modules/*" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 diff --git a/.github/workflows/pre_release.yml b/.github/workflows/pre_release.yml index b653423c..e1fe6a62 100644 --- a/.github/workflows/pre_release.yml +++ b/.github/workflows/pre_release.yml @@ -5,11 +5,11 @@ on: PYTHON_VERSION: description: "Python Version" required: false - default: "3.12.2" + default: "3.12" POETRY_VERSION: description: "The version of Poetry to use" required: false - default: "1.8.2" # Ensure this matches the latest stable version + default: "2.4.1" # Ensure this matches the latest stable version RELEASE_TAG: description: "The new version should be a valid PEP 440 string" required: true @@ -21,12 +21,12 @@ jobs: test_pypi_release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Install Poetry run: pip install poetry==${{ inputs.POETRY_VERSION }} shell: bash - name: Set up Python ${{ inputs.PYTHON_VERSION }} - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ inputs.PYTHON_VERSION }} - name: Configure Poetry with specified Python version diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9909b9e1..0d632c91 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,11 +5,11 @@ on: PYTHON_VERSION: description: "Python Version" required: false - default: "3.12.2" + default: "3.12" POETRY_VERSION: description: "The version of Poetry to use" required: false - default: "1.8.2" + default: "2.4.1" RELEASE_TAG: description: "The new version should be a valid PEP 440 string" required: true @@ -22,12 +22,12 @@ jobs: name: Builds Using Poetry and Publishes to PyPI runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Install Poetry run: pip install poetry==${{ inputs.POETRY_VERSION }} shell: bash - name: Set up Python ${{ inputs.PYTHON_VERSION }} - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ inputs.PYTHON_VERSION }} - run: poetry version ${{ inputs.RELEASE_TAG }}