diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..5ad55a8b --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,18 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "monthly" + time: "06:00" + open-pull-requests-limit: 10 + - package-ecosystem: "maven" + directory: "/" + schedule: + interval: "monthly" + time: "09:00" diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index d2bd0fed..db280d43 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -19,9 +19,9 @@ jobs: java: [11, 16, 17] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - name: Set up JDK - uses: actions/setup-java@v3 + uses: actions/setup-java@v4 with: java-version: ${{ matrix.java }} distribution: 'temurin' diff --git a/pom.xml b/pom.xml index 272ed0aa..e790cdb6 100644 --- a/pom.xml +++ b/pom.xml @@ -11,7 +11,7 @@ UTF-8 11 - 1.78 + 1.78.1 @@ -49,7 +49,7 @@ org.junit junit-bom - 5.10.1 + 5.10.3 pom import @@ -108,7 +108,7 @@ org.slf4j slf4j-simple - 2.0.9 + 2.0.13 test @@ -127,7 +127,7 @@ org.apache.maven.plugins maven-surefire-plugin - 3.2.2 + 3.3.1 @@ -135,7 +135,7 @@ org.apache.maven.plugins maven-compiler-plugin - 3.11.0 + 3.13.0 org.sonatype.plugins