diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000000..88a2f8a4145 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,19 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" + - package-ecosystem: npm + directory: "/javascript" + schedule: + interval: "weekly" + - package-ecosystem: bundler + directory: "/ruby" + schedule: + interval: "weekly" diff --git a/.github/workflows/ci2.yml b/.github/workflows/ci2.yml index 3f9eb05a3b0..0323b6a8f5e 100644 --- a/.github/workflows/ci2.yml +++ b/.github/workflows/ci2.yml @@ -67,7 +67,7 @@ jobs: run: docker cp build-post:/home/daos/daos/nlt-junit.xml ./ - name: Publish NLT test results if: always() - uses: EnricoMi/publish-unit-test-result-action@v1.17 + uses: EnricoMi/publish-unit-test-result-action@v2.7 with: github_token: ${{ secrets.GITHUB_TOKEN }} files: nlt-junit.xml diff --git a/.github/workflows/landing-builds.yml b/.github/workflows/landing-builds.yml index 103f150915a..fb97997a769 100644 --- a/.github/workflows/landing-builds.yml +++ b/.github/workflows/landing-builds.yml @@ -137,7 +137,7 @@ jobs: run: docker cp build-post:/home/daos/daos/nlt-junit.xml ./ - name: Publish NLT test results if: always() - uses: EnricoMi/publish-unit-test-result-action@v1.17 + uses: EnricoMi/publish-unit-test-result-action@v2.7 with: github_token: ${{ secrets.GITHUB_TOKEN }} files: nlt-junit.xml diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml index e404f8770be..ead66309fba 100644 --- a/.github/workflows/ossf-scorecard.yml +++ b/.github/workflows/ossf-scorecard.yml @@ -38,7 +38,7 @@ jobs: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1 + uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0 with: results_file: results.sarif results_format: sarif diff --git a/.github/workflows/rpm-build-and-test.yml b/.github/workflows/rpm-build-and-test.yml index a770293959f..31d0977ad82 100644 --- a/.github/workflows/rpm-build-and-test.yml +++ b/.github/workflows/rpm-build-and-test.yml @@ -529,7 +529,7 @@ jobs: - name: Publish test results if: (!cancelled()) && (success() || failure()) && steps.run-test.outcome != 'skipped' - uses: EnricoMi/publish-unit-test-result-action@v2 + uses: EnricoMi/publish-unit-test-result-action@v2.7 with: check_name: ${{ env.STAGE_NAME }} Test Results (old) github_token: ${{ secrets.GITHUB_TOKEN }} @@ -763,7 +763,7 @@ jobs: - name: Publish test results if: (!cancelled()) && (success() || failure()) && steps.run-test.outcome != 'skipped' - uses: EnricoMi/publish-unit-test-result-action@v2 + uses: EnricoMi/publish-unit-test-result-action@v2.7 with: check_name: ${{ env.STAGE_NAME }} Test Results (old) github_token: ${{ secrets.GITHUB_TOKEN }} diff --git a/LICENSE b/LICENSE index 2403a0097f1..7b6e49b83a8 100644 --- a/LICENSE +++ b/LICENSE @@ -1,6 +1,6 @@ -Copyright 2021-2022 Intel Corporation. +BSD-2-Clause Plus Patent License -SPDX-License-Identifier: BSD-2-Clause-Patent +Copyright 2021-2024 Intel Corporation. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: