diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5792ed9..48e226b 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -11,6 +11,10 @@ updates: directory: "/" schedule: interval: "weekly" + ignore: + - dependency-name: actions/cache + - dependency-name: actions/checkout + - dependency-name: actions/setup-python - package-ecosystem: "pip" directory: "/" diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index ae62dcc..9d8b179 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -17,16 +17,16 @@ jobs: steps: - id: setup-env uses: cisagov/setup-env-github-action@develop - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - id: setup-python - uses: actions/setup-python@v2 + uses: actions/setup-python@v3 with: python-version: "3.10" # We need the Go version and Go cache location for the actions/cache step, # so the Go installation must happen before that. - uses: actions/setup-go@v2 with: - go-version: '1.16' + go-version: "1.16" - name: Store installed Go version id: go-version run: | @@ -36,7 +36,7 @@ jobs: id: go-cache run: | echo "::set-output name=dir::$(go env GOCACHE)" - - uses: actions/cache@v2 + - uses: actions/cache@v3 env: BASE_CACHE_KEY: "${{ github.job }}-${{ runner.os }}-\ py${{ steps.setup-python.outputs.python-version }}-\ diff --git a/.github/workflows/update_software_lists.yml b/.github/workflows/update_software_lists.yml index 3214801..33c9d65 100644 --- a/.github/workflows/update_software_lists.yml +++ b/.github/workflows/update_software_lists.yml @@ -43,14 +43,14 @@ jobs: # Don't run if we're seeing an update push if: github.actor != needs.setup.outputs.git_user steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 with: token: ${{ secrets.CISAGOVBOT_PAT }} - id: setup-python - uses: actions/setup-python@v2 + uses: actions/setup-python@v3 with: python-version: "3.10" - - uses: actions/cache@v2 + - uses: actions/cache@v3 env: BASE_CACHE_KEY: "${{ github.job }}-${{ runner.os }}-\ py${{ steps.setup-python.outputs.python-version }}-" @@ -86,7 +86,7 @@ jobs: - generate_updates if: needs.generate_updates.outputs.has_updates == 'true' steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 with: token: ${{ secrets.CISAGOVBOT_PAT }} - name: Configure git diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index df32b78..8c2abc5 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -37,7 +37,7 @@ repos: args: - --config=.mdl_config.yaml - repo: https://github.com/pre-commit/mirrors-prettier - rev: v2.5.1 + rev: v2.6.1 hooks: - id: prettier - repo: https://github.com/adrienverge/yamllint @@ -47,6 +47,13 @@ repos: args: - --strict + # GitHub Actions hooks + - repo: https://github.com/python-jsonschema/check-jsonschema + rev: 0.14.2 + hooks: + - id: check-github-actions + - id: check-github-workflows + # Shell script hooks - repo: https://github.com/cisagov/pre-commit-shfmt rev: v0.0.2