ci: upgrade actions; dependabot

Author: m6w6

.github/dependabot.yml

@@ -0,0 +1,8 @@
+version: 2
+
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5

.github/workflows/cmake-build-ci.gen

@@ -383,8 +383,10 @@ jobs:
       BUILD_TESTING:      "ON"
       VERBOSE:            "ON"
       ENABLE_SANITIZERS:  ${{ matrix.sanitizer }}
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
 <?php steps("Linux"); ?>
 
 # memcached
@@ -411,9 +413,11 @@ jobs:
       INSTALL_MEMCACHED:  ""
       MEMCACHED_PREFIX:   "/tmp"
       ENABLE_SASL:        "ON"
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5
         with:
           repository: memcached/memcached
           path: memcached
@@ -432,10 +436,12 @@ jobs:
     env:
       CMAKE_BUILD_TYPE:   "Release"
       BUILD_DOCS_MANGZ:   "ON"
+    permissions:
+      contents: read
 <?php env_override("macOS")?>
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 <?php steps("macOS", false); ?>
@@ -458,7 +464,7 @@ jobs:
       CC_VND: ${{ matrix.cc_vnd }}
       CC_VER: ${{ matrix.cc_ver }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 <?php steps("Windows", true); ?>
@@ -480,8 +486,10 @@ jobs:
       OS_VER: ${{ matrix.os_ver }}
       CC_VND: ${{ matrix.cc_vnd }}
       CC_VER: ${{ matrix.cc_ver }}
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 <?php steps("Linux", true); ?>

.github/workflows/cmake-build-ci.yml

@@ -44,8 +44,10 @@ jobs:
       BUILD_TESTING:      "ON"
       VERBOSE:            "ON"
       ENABLE_SANITIZERS:  ${{ matrix.sanitizer }}
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - name: Prepare environment (for cur gnu on ubuntu-24.04)
         if: (env.OS_VER=='ubuntu-24.04') && (env.CC_VND=='gnu') && (env.CC_VER=='cur')
         run: |
@@ -134,9 +136,11 @@ jobs:
       INSTALL_MEMCACHED:  ""
       MEMCACHED_PREFIX:   "/tmp"
       ENABLE_SASL:        "ON"
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5
         with:
           repository: memcached/memcached
           path: memcached
@@ -217,13 +221,15 @@ jobs:
     env:
       CMAKE_BUILD_TYPE:   "Release"
       BUILD_DOCS_MANGZ:   "ON"
+    permissions:
+      contents: read
       OS_VND:   macOS #
       OS_VER:   macos-15 #
       CC_VND:   clang #
       CC_VER:   cur
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Install dependencies (macOS)
@@ -297,7 +303,7 @@ jobs:
       CC_VND: ${{ matrix.cc_vnd }}
       CC_VER: ${{ matrix.cc_ver }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Prepare environment (Windows)
@@ -374,8 +380,10 @@ jobs:
       OS_VER: ${{ matrix.os_ver }}
       CC_VND: ${{ matrix.cc_vnd }}
       CC_VER: ${{ matrix.cc_ver }}
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Prepare environment (for new gnu on ubuntu-22.04)

.github/workflows/docs-publish-pages.yml

@@ -17,8 +17,10 @@ env:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v5
       - name: Install dependencies
         run: |
           sudo apt-get update -y
@@ -32,7 +34,7 @@ jobs:
       - name: Build
         run: |
           make -C build html
-      - uses: crazy-max/ghaction-github-pages@v2
+      - uses: crazy-max/ghaction-github-pages@v4
         if: success()
         with:
           jekyll: false