From 07cd69aa9fee9d08febaab39acc060c4a47e5d31 Mon Sep 17 00:00:00 2001
From: "Joshua A. Anderson" <joaander@umich.edu>
Date: Sun, 11 Feb 2024 20:51:21 -0500
Subject: [PATCH] Update dependabot, actions, and the readme. (#976)

* Test on the latest macos-14 runners.

These should be faster than the current macos-latest.

* Automatically update GitHub actions versions with dependabot.

Adjust dependabot PRs to a weekly schedule with a limit on the active PRs to reduce noise.

* Mention the discussion board in the README.

* Use latest github actions versions.

* Switch back to macos-latest on failing builds.
---
 .github/dependabot.yml                 | 18 ++++++++++++++++--
 .github/workflows/publish-packages.yml |  4 ++--
 .github/workflows/run-pytest.yml       |  8 ++++----
 README.md                              |  6 ++++--
 4 files changed, 26 insertions(+), 10 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index bb634c642..556067724 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,7 +3,21 @@ updates:
 - package-ecosystem: pip
   directory: "/"
   schedule:
-    interval: monthly
-  open-pull-requests-limit: 10
+    interval: "weekly"
+    time: "07:00"
+    timezone: "EST5EDT"
+  open-pull-requests-limit: 2
   reviewers:
     - glotzerlab/signac-maintainers
+- package-ecosystem: "github-actions"
+  directory: "/"
+  target-branch: main
+  schedule:
+    interval: "weekly"
+    time: "07:00"
+    timezone: "EST5EDT"
+  pull-request-branch-name:
+    separator: "-"
+  reviewers:
+    - glotzerlab/signac-maintainers
+  open-pull-requests-limit: 2
diff --git a/.github/workflows/publish-packages.yml b/.github/workflows/publish-packages.yml
index f0bff771d..711cd4fc0 100644
--- a/.github/workflows/publish-packages.yml
+++ b/.github/workflows/publish-packages.yml
@@ -17,9 +17,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Check out repo
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: "3.11"
     - name: Install dependencies
diff --git a/.github/workflows/run-pytest.yml b/.github/workflows/run-pytest.yml
index 93c522fb2..6f7247c1d 100644
--- a/.github/workflows/run-pytest.yml
+++ b/.github/workflows/run-pytest.yml
@@ -52,16 +52,16 @@ jobs:
             os: 'ubuntu-latest'
             python: '3.12'
             dependencies: 'minimal'
-          - os: 'macos-latest'
+          - os: 'macos-14'
             python: '3.12'
             dependencies: 'minimal'
           - os: 'windows-latest'
             python: '3.12'
             dependencies: 'minimal'
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Set up Python ${{ matrix.python }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python }}
     - name: Install newest dependencies
@@ -87,6 +87,6 @@ jobs:
     - name: Test with pytest
       run: |
         pytest --cov=signac --cov-config=pyproject.toml --cov-report=xml tests/ -v
-    - uses: codecov/codecov-action@v3
+    - uses: codecov/codecov-action@v4
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/README.md b/README.md
index 2ed84e20f..395ea2fe5 100644
--- a/README.md
+++ b/README.md
@@ -22,8 +22,10 @@ This makes it easier to operate on large data spaces, streamlines post-processin
   Examples, tutorials, topic guides, and package Python APIs.
 - [Package documentation](https://docs.signac.io/projects/core/):
   API reference for the **signac** package.
-- [Slack Chat Support](https://signac.io/slack-invite/):
-  Get help and ask questions on the **signac** Slack workspace.
+- [Discussion board](https://github.com/glotzerlab/signac/discussions/):
+  Ask the **signac** user community for help.
+- [Slack workspace](https://signac.io/slack-invite/):
+  Chat about **signac**.
 - [**signac** website](https://signac.io/):
   Framework overview and news.