Update Actions

.github/workflows/auto-merge-dependabot.yml

@@ -1,29 +1,15 @@
 name: Auto-merge Dependabot PRs
 
 on:
-  pull_request_target
+  workflow_run:
+    workflows: [ "Pull Request" ]
+    types: [ completed ]
 
 jobs:
-  auto-approve:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Wait for build success
-        uses: fountainhead/[email protected]
-        id: wait-for-build
-        if: github.actor == 'dependabot[bot]'
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          checkName: 'Build Java 17'
-          ref: ${{ github.event.pull_request.head.sha || github.sha }}
-      - name: autoapprove
-        if: github.actor == 'dependabot[bot]' && steps.wait-for-build.outputs.conclusion == 'success'
-        uses: hmarr/[email protected]
-        with:
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
-      - name: automerge
-        if: github.actor == 'dependabot[bot]' && steps.wait-for-build.outputs.conclusion == 'success'
-        uses: "pascalgn/[email protected]"
-        env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-          MERGE_LABELS: "dependencies"
-          MERGE_METHOD: "squash"
+  automerge-dependabot-pr:
+    if: "github.actor == 'dependabot[bot]'
+      && github.event.workflow_run.event == 'pull_request'
+      && github.event.workflow_run.conclusion == 'success'"
+    uses: Jikoo/PlanarActions/.github/workflows/pr_automerge_complete.yml@master
+    with:
+      triggering-workflow-run: ${{ github.event.workflow_run.id }}

.github/workflows/ci.yml

@@ -2,27 +2,25 @@ name: Build
 
 on:
   push:
-    branches:
-      - master
-  pull_request_target:
-    types: [ opened, synchronize, reopened ]
+    branches-ignore:
+      - dependabot/**
 
 jobs:
   build:
     runs-on: ubuntu-latest
     name: Build Java 17
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Set up JDK
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'adopt'
           java-version: '17'
           cache: 'maven'
 
       - name: Cache SonarCloud packages
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.sonar/cache
           key: ${{ runner.os }}-sonar

.github/workflows/pull_request.yml

@@ -0,0 +1,13 @@
+name: Pull Request
+
+on:
+  pull_request:
+
+jobs:
+  run-ci:
+    uses: Jikoo/PlanarActions/.github/workflows/ci_maven.yml@master
+  store-dependabot-pr-data:
+    if: "github.actor == 'dependabot[bot]' && github.event_name == 'pull_request'"
+    uses: Jikoo/PlanarActions/.github/workflows/pr_automerge_prep.yml@master
+    with:
+      pr-number: ${{ github.event.number }}

appveyor.yml

@@ -7,7 +7,7 @@ only_commits:
     - pom.xml
     - appveyor.yml
 version: '{build}'
-clone_depth: 10
+shallow_clone: true
 environment:
   matrix:
     - appveyor_build_worker_image: Visual Studio 2022