Update CI, funding configuration, and Dependabot settings #103
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This commit updates the Dependabot config to include GitHub Actions monitoring alongside Gradle. Both ecosystems are now set to update on a weekly schedule. Minor formatting adjustments were also made for consistency.
Configure FUNDING.yml to link the repository to the GitHub sponsor account "saschpe". This enables users to support the project financially directly via GitHub Sponsors.
The workflow now triggers only for pushes to 'main' and ignores changes to specific files like .gitignore, LICENSE, and README.md. Additionally, it triggers on pull requests targeting the 'main' branch, enhancing clarity and efficiency in pipeline execution.
Pin GitHub Actions dependencies to specific commit hashes for improved stability and security. Also, upgrade Python version to 3.13, update MobSF/mobsfscan to v0.4.5, and adjust MobSF and CodeQL actions for consistency. These changes ensure reproducibility and align with the latest recommended practices.
Upgraded the Kotlin version from 2.1.0 to 2.1.10 in the dependencies file. This ensures compatibility with the latest features and fixes in the Kotlin release.
saschpe
force-pushed
the
saschpe.actions
branch
from
bc56cc1 to
556bb40
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
This pull request includes the following changes:
CI Trigger Updates: Modifies GitHub Actions workflow to trigger only for pushes to the
mainbranch, excluding changes to specific files (.gitignore,LICENSE,README.md) and on pull requests targeting themainbranch, streamlining pipeline efficiency.GitHub Funding Configuration: Adds a
FUNDING.ymlfile linking the repository to the GitHub sponsor accountsaschpe, enabling user contributions via GitHub Sponsors.Dependabot Configuration Update: Updates Dependabot settings to include tracking for GitHub Actions alongside Gradle. Weekly update schedules are configured, with additional format consistency adjustments.
These improvements enhance project automation, funding capabilities, and dependency management