From 287e2fd7f955fbebf56970cb16e0b95d036536d8 Mon Sep 17 00:00:00 2001 From: Jared Gray Date: Wed, 25 Mar 2026 16:25:28 -0400 Subject: [PATCH 1/2] Create dependency-graph.yml --- .github/workflows/dependency-graph.yml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 .github/workflows/dependency-graph.yml diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml new file mode 100644 index 000000000..1611a05cc --- /dev/null +++ b/.github/workflows/dependency-graph.yml @@ -0,0 +1,26 @@ +name: "Load Dependency Graph" + +on: + push: + branches: + - "main" + - "master" + schedule: + - cron: '0 6 * * *' + workflow_call: + workflow_dispatch: + +jobs: + scan-dependencies: + runs-on: ubuntu-latest + timeout-minutes: 10 + steps: + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: Alfresco/alfresco-build-tools/.github/actions/maven-dependency-scan@v15.9.0 + with: + java-version: '21' + maven-version: '3.9.9' + maven-args: -Dscopes=compile,runtime + maven-username: ${{ secrets.NEXUS_USERNAME }} + maven-password: ${{ secrets.NEXUS_PASSWORD }} + maven-settings-path: ".ci.settings.xml" \ No newline at end of file From 07e8250d25cc4618f0a470184c06965fc8dbb57d Mon Sep 17 00:00:00 2001 From: Jared Gray Date: Thu, 2 Apr 2026 08:39:06 -0400 Subject: [PATCH 2/2] Update dependabot.yml --- .github/dependabot.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index fc05ef6b3..eaf6f9333 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -57,3 +57,11 @@ updates: time: "22:00" timezone: Europe/London open-pull-requests-limit: 99 +- package-ecosystem: github-actions + directory: "/" + schedule: + interval: monthly + groups: + github-actions: + patterns: + - "*" \ No newline at end of file