diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json index c200af2..7808b21 100644 --- a/.config/dotnet-tools.json +++ b/.config/dotnet-tools.json @@ -3,14 +3,14 @@ "isRoot": true, "tools": { "dotnet-stryker": { - "version": "4.5.1", + "version": "4.8.1", "commands": [ "dotnet-stryker" ], "rollForward": false }, "dotnet-reportgenerator-globaltool": { - "version": "5.4.7", + "version": "5.4.12", "commands": [ "reportgenerator" ], diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 887389e..adc5647 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,14 +9,26 @@ updates: labels: - ":game_die: dependencies" - ":robot: bot" - open-pull-requests-limit: 10 + groups: + packages: + patterns: + - "*" ignore: - ## avoid Moq 4.20+ - dependency-name: "Moq" - ## Preserve backward compatibility for library consumers - dependency-name: "FluentValidation" - dependency-name: "FluentValidation.DependencyInjectionExtensions" - ## V8 onwards have licencing imposed - dependency-name: "FluentAssertions" - ## CsvHelper has binary incompatibilities - dependency-name: "CsvHelper" + - package-ecosystem: "github-actions" + directory: "/.github/workflows" + schedule: + interval: "daily" + time: "06:00" + timezone: "Europe/London" + labels: + - ":game_die: dependencies" + - ":robot: bot" + groups: + packages: + patterns: + - "*" diff --git a/.github/workflows/buildtestpackage.yml b/.github/workflows/buildtestpackage.yml index f7a4347..14a7bd4 100644 --- a/.github/workflows/buildtestpackage.yml +++ b/.github/workflows/buildtestpackage.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Setup .NET uses: actions/setup-dotnet@v4 @@ -80,7 +80,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Setup .NET uses: actions/setup-dotnet@v4 diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index c531b45..740e44d 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -19,7 +19,7 @@ jobs: if: github.ref == 'refs/heads/main' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Setup .NET uses: actions/setup-dotnet@v4 diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml index ad8ccbc..021e7de 100644 --- a/.github/workflows/sast.yml +++ b/.github/workflows/sast.yml @@ -30,7 +30,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Initialize CodeQL uses: github/codeql-action/init@v3 diff --git a/.github/workflows/sca.yml b/.github/workflows/sca.yml index c360fea..2446592 100644 --- a/.github/workflows/sca.yml +++ b/.github/workflows/sca.yml @@ -23,9 +23,9 @@ jobs: name: Dependency scan runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Dependency scan - uses: tonycknight/pkgchk-action@v1.0.22 + uses: tonycknight/pkgchk-action@v1 with: project-path: ${{ env.SOLUTION_NAME }}