Merge branch 'main' into issue-95

Author: vorburger

.github/dependabot.yml

@@ -3,6 +3,15 @@ updates:
 - package-ecosystem: maven
   directory: "/"
   schedule:
-    interval: daily
+    interval: "quarterly"
+    day: monday
     time: "04:00"
   open-pull-requests-limit: 99
+  
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    interval: "quarterly"
+    day: monday
+    time: "04:00"
+  open-pull-requests-limit: 99  

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,38 @@
+# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
+# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+name: Java CI with Maven
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    permissions:
+      # https://github.com/advanced-security/maven-dependency-submission-action?tab=readme-ov-file#pre-requisites
+      contents: write
+
+    steps:
+      - uses: actions/checkout@v6
+      - name: Set up JDK 21
+        uses: actions/setup-java@v5
+        with:
+          java-version: "21"
+          distribution: "temurin"
+          cache: maven
+      - name: Build with Maven
+        run: ./mvnw -B package --file pom.xml
+
+      # Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
+      - name: Update dependency graph
+        uses: advanced-security/maven-dependency-submission-action@v5

.github/workflows/maven.yml

@@ -0,0 +1,3 @@
+wrapperVersion=3.3.4
+distributionType=only-script
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip

.mvn/wrapper/maven-wrapper.properties

@@ -4,7 +4,7 @@ Java lib for monitoring directories or individual files based on the `java.nio.f
 
 [![Maven Central](https://maven-badges.herokuapp.com/maven-central/ch.vorburger/fswatch/badge.svg)](https://maven-badges.herokuapp.com/maven-central/ch.vorburger/fswatch)
 [![Javadocs](http://www.javadoc.io/badge/ch.vorburger/fswatch.svg)](http://www.javadoc.io/doc/ch.vorburger/fswatch)
-[![Build Status](https://app.travis-ci.com/vorburger/ch.vorburger.fswatch.svg?branch=master)](https://app.travis-ci.com/vorburger/ch.vorburger.fswatch)
+[![Build Status](https://app.travis-ci.com/vorburger/ch.vorburger.fswatch.svg?branch=main)](https://app.travis-ci.com/vorburger/ch.vorburger.fswatch)
 
 ## Usage
 

.travis.yml

@@ -0,0 +1,17 @@
+# Security Policy
+
+## Supported Versions
+
+The following versions of this project are currently supported with security updates:
+
+| Version | Supported          |
+|---------|--------------------|
+| `main`  | :white_check_mark: |
+| 1.3.x   | :white_check_mark: |
+| Older   | :x:                |
+
+## Reporting a Vulnerability
+
+Email https://github.com/vorburger. (You can find the email address in the `git log` after you `git clone` this repo.)
+
+Or contact https://tidelift.com/security who will get in touch with me.