This is an automated email from the ASF dual-hosted git repository.
GitToTheHub pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-ios.git
The following commit(s) were added to refs/heads/master by this push:
new 74c8cd44 chore: action workflow updates & add dependabot (#1704)
74c8cd44 is described below
commit 74c8cd44e602c40e2e7e6e7911e09cac5dcd9740
Author: エリス <[email protected]>
AuthorDate: Thu Aug 27 01:29:12 2026 +0900
chore: action workflow updates & add dependabot (#1704)
* chore(dependabot): add configurations
* chore(workflow): release-audit
* chore(workflow): update actions
* chore(workflow): remove licence_checker.yml config
---
licence_checker.yml => .github/dependabot.yml | 37 +++++++++++++++++++++++++--
.github/workflows/ci.yml | 14 +++++-----
.github/workflows/docs.yml | 2 +-
.github/workflows/draft-release.yml | 4 +--
.github/workflows/release-audit.yml | 5 ++--
5 files changed, 47 insertions(+), 15 deletions(-)
diff --git a/licence_checker.yml b/.github/dependabot.yml
similarity index 53%
rename from licence_checker.yml
rename to .github/dependabot.yml
index 6456f794..609ac461 100644
--- a/licence_checker.yml
+++ b/.github/dependabot.yml
@@ -15,5 +15,38 @@
# specific language governing permissions and limitations
# under the License.
-# Empty for the release audit workflow.
-# The `license-config` is required even if there are no custom configs
+version: 2
+
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ gh-actions-patch-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ - "minor"
+
+ - package-ecosystem: "npm"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ semver-major-days: 14
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ npm-patch:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ npm-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "minor"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4f5290cc..1a06e4ee 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,12 +35,12 @@ jobs:
security-events: write
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
- - uses:
github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+ - uses:
github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
with:
languages: javascript
queries: security-and-quality
@@ -50,7 +50,7 @@ jobs:
- node_modules
- templates/project/www/cordova.js
- - uses:
github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+ - uses:
github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
test-native:
name: Native Testing on ${{ matrix.os }}
@@ -67,12 +67,12 @@ jobs:
CDV_IOS_SIM: ${{ matrix.os == 'macos-15' && 'iPhone 16e' || 'iPhone 17'
}}
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: latest
@@ -107,12 +107,12 @@ jobs:
os: [ubuntu-latest, windows-latest, macos-latest]
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: ${{ matrix.node-version }}
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index dea195a1..362687d2 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -40,7 +40,7 @@ jobs:
url: ${{ steps.deployment.outputs.page_url }}
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
diff --git a/.github/workflows/draft-release.yml
b/.github/workflows/draft-release.yml
index 9f11b553..a7a572ee 100644
--- a/.github/workflows/draft-release.yml
+++ b/.github/workflows/draft-release.yml
@@ -31,12 +31,12 @@ jobs:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
package-manager-cache: false
diff --git a/.github/workflows/release-audit.yml
b/.github/workflows/release-audit.yml
index 3156baa9..f50edfcc 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,7 +34,7 @@ jobs:
runs-on: ubuntu-latest
steps:
# Checkout project
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
fetch-depth: 1
@@ -43,7 +43,7 @@ jobs:
- uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd
# v3.0.0
# Setup environment with node
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
@@ -54,5 +54,4 @@ jobs:
# Check node package licenses
- uses:
erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0
with:
- license-config: 'licence_checker.yml'
include-asf-category-a: true
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
