Merge branch 'master' into pbrfixes

Author: riccardobl

.github/dependabot.yml

@@ -0,0 +1,25 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "gradle" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 30
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 30
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "ci"
+    labels:
+      - "dependencies"
+      - "github-actions"

.github/workflows/bounty.yml

@@ -14,7 +14,7 @@ jobs:
     if: startsWith(github.event.label.name, 'diff:')
     steps:
       - name: Comment bounty info
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8.0.0
         env:
           FORUM_URL: "https://hub.jmonkeyengine.org/t/bounty-program-trial-starts-today/49394/"
           RESERVE_HOURS: "48"

.github/workflows/format.yml

@@ -8,11 +8,11 @@ jobs:
     if: ${{ false }} 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0   
       - name: Prettify code
-        uses: creyD/prettier_action@v4.3
+        uses: creyD/prettier_action@8c18391fdc98ed0d884c6345f03975edac71b8f0 # v4.6
         with:
           prettier_options: --tab-width 4 --print-width 110 --write **/**/*.java
           prettier_version: "2.8.8"