Merge pull request #7 from paketo-buildpacks/automation/github-config/update

Updates github-config

Author: pacostas

.github/dependabot.yml

@@ -1,13 +1,18 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
 ---
 version: 2
 updates:
 - package-ecosystem: gomod
   directory: "/"
   schedule:
     interval: daily
-  open-pull-requests-limit: 10
+  allow:
+  # Allow both direct and indirect updates for all packages
+  - dependency-type: "all"
+  # group all minor and patch dependency updates together
+  groups:
+    go-modules:
+      patterns:
+      - "*"
+      update-types:
+      - "minor"
+      - "patch"

.github/workflows/approve-bot-pr.yml

@@ -52,7 +52,7 @@ jobs:
 
     - name: Checkout
       if: steps.human-commits.outputs.human_commits == 'false' && steps.unverified-commits.outputs.unverified_commits == 'false'
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Approve
       if: steps.human-commits.outputs.human_commits == 'false' && steps.unverified-commits.outputs.unverified_commits == 'false'

.github/workflows/create-release.yml

@@ -19,7 +19,7 @@ jobs:
       combos: ${{ steps.get_combos.outputs.combos }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Get Builders
       id: get-builders
@@ -88,7 +88,7 @@ jobs:
       builders_changed: ${{ steps.compare_previous_release.outputs.builders_changed }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0  # gets full history
 
@@ -122,7 +122,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Setup Go
       uses: actions/setup-go@v6
@@ -148,7 +148,7 @@ jobs:
       builder_info: ${{ steps.notes.outputs.body }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Setup Go
       uses: actions/setup-go@v6
@@ -181,7 +181,7 @@ jobs:
           | grep -v 'Warning' > "${{ matrix.builders.name }}-info.md"
 
     - name: Upload info for ${{ matrix.builders.name }}
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: "${{ matrix.builders.name }}-info.md"
         path: "${{ matrix.builders.name }}-info.md"
@@ -192,12 +192,12 @@ jobs:
     needs: [preparation, get_builders_info]
     steps:
     - name: Checkout With History
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0  # gets full history
 
     - name: Download Release Note File(s)
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v6
       with:
         path: info
         pattern: "*info.md"

.github/workflows/lint-yaml.yml

@@ -10,10 +10,10 @@ jobs:
   lintYaml:
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
 
     - name: Checkout github-config
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         repository: paketo-buildpacks/github-config
         path: github-config

.github/workflows/push-image.yml

@@ -17,7 +17,7 @@ jobs:
       tag: ${{ steps.event.outputs.tag }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Get Builders
       id: get-builders
@@ -65,7 +65,7 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Create Builder Image and Push To Dockerhub
       env:

.github/workflows/synchronize-labels.yml

@@ -12,7 +12,7 @@ jobs:
         runs-on:
             - ubuntu-24.04
         steps:
-            - uses: actions/checkout@v5
+            - uses: actions/checkout@v6
             - uses: micnncim/action-label-syncer@v1
               env:
                   GITHUB_TOKEN: ${{ github.token }}

.github/workflows/test-builder.yml

@@ -14,7 +14,7 @@ jobs:
       combos: ${{ steps.get_combos.outputs.combos }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Get Combos
       id: get_combos
@@ -71,7 +71,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Setup Go
       uses: actions/setup-go@v6

.github/workflows/test-pull-request.yml

@@ -15,7 +15,7 @@ jobs:
       combos: ${{ steps.get_combos.outputs.combos }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Get Combos
       id: get_combos
@@ -72,7 +72,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Setup Go
       uses: actions/setup-go@v6
@@ -103,7 +103,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
     - name: Upload Artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: event-payload
         path: ${{ github.event_path }}

.github/workflows/update-builder-toml.yml

@@ -2,7 +2,7 @@ name: Update builder.toml files and Send Pull Request
 
 on:
   schedule:
-  - cron: '36 0,12 * * *' # daily at 00:36 and 12:36 UTC
+  - cron: '27 2,14 * * *'  # daily at 02:27 and 14:27 UTC
   workflow_dispatch: {}
 
 concurrency: builder_update
@@ -18,7 +18,7 @@ jobs:
       builders: ${{ steps.get-builders.outputs.builders }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Get Builders
       id: get-builders
@@ -58,12 +58,13 @@ jobs:
       commit_sha: ${{ steps.commit.outputs.commit_sha }}
     needs: preparation
     strategy:
+      max-parallel: 1
       matrix:
         builders: ${{ fromJSON(needs.preparation.outputs.builders) }}
 
     steps:
     - name: Check out
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Checkout branch
       uses: paketo-buildpacks/github-config/actions/pull-request/checkout-branch@main
@@ -92,18 +93,24 @@ jobs:
         branch: "automation/builder-toml-update"
 
     - name: Output commit sha
+      if: ${{ steps.commit.outputs.commit_sha != '' }}
       run: echo "commit_sha=${{ steps.commit.outputs.commit_sha }}" >> "$GITHUB_OUTPUT"
 
   open-pull-request:
     name: Open pull request
     runs-on: ubuntu-24.04
     needs: update
+    if: ${{ needs.update.outputs.commit_sha != '' }}
     steps:
-    - name: Checkout
-      uses: actions/checkout@v5
+    - name: Check out
+      uses: actions/checkout@v6
+
+    - name: Checkout branch
+      uses: paketo-buildpacks/github-config/actions/pull-request/checkout-branch@main
+      with:
+        branch: "automation/builder-toml-update"
 
     - name: Open Pull Request
-      if: ${{ needs.update.outputs.commit_sha != '' }}
       uses: paketo-buildpacks/github-config/actions/pull-request/open@main
       with:
         token: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}

.github/workflows/update-github-config.yml

@@ -2,7 +2,7 @@ name: Update shared github-config
 
 on:
   schedule:
-  - cron: '47 8 * * *' # daily at 08:46 UTC
+  - cron: '47 8 * * *'  # daily at 08:46 UTC
   workflow_dispatch: {}
 
 concurrency: github_config_update
@@ -14,12 +14,12 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         token: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
 
     - name: Checkout github-config
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         repository: paketo-buildpacks/github-config
         path: github-config