MAINT: add Dependabot and update actions

.github/dependabot.yaml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    assignees:
+      - redeboer
+      - shenvitor
+    commit-message:
+      prefix: MAINT
+    groups:
+      actions:
+        patterns:
+          - "*"
+    labels:
+      - 🔨 Maintenance
+    schedule:
+      interval: monthly

.github/workflows/cd.yml

@@ -9,25 +9,8 @@ on:
 jobs:
   milestone:
     if: startsWith(github.ref, 'refs/tags')
-    uses: ComPWA/actions/.github/workflows/close-milestone.yml@v1
-  push-to-version-branches:
-    name: Push to version branches
+    uses: ComPWA/actions/.github/workflows/close-milestone.yml@v2
+  push:
     if: startsWith(github.ref, 'refs/tags') && !github.event.release.prerelease
-    runs-on: ubuntu-24.04
-    steps:
-      - uses: actions/checkout@v4
-      - name: Configure Git credentials
-        run: |
-          git config --global user.name "GitHub Action"
-          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
-      - name: Push to matching minor version branch
-        env:
-          TAG: ${{ github.ref_name }}
-        run: |
-          re='^(v?)([0-9]+)\.([0-9]+)\.[0-9]+'
-          if [[ $TAG =~ $re ]]; then
-            MAJOR_VERSION="${BASH_REMATCH[2]}"
-            MINOR_VERSION="${BASH_REMATCH[2]}.${BASH_REMATCH[3]}"
-            git push origin HEAD:refs/heads/v$MAJOR_VERSION --force
-            git push origin HEAD:refs/heads/v$MINOR_VERSION --force
-          fi
+    secrets: inherit
+    uses: ComPWA/actions/.github/workflows/push-to-version-branches.yml@v2

.github/workflows/pr-linting.yml

@@ -10,24 +10,5 @@ on:
       - unlabeled
 
 jobs:
-  check-labels:
-    name: Check labels
-    runs-on: ubuntu-24.04
-    steps:
-      - uses: docker://agilepathway/pull-request-label-checker:latest
-        with:
-          any_of: >-
-            🐛 Bug,✨ Feature,⚙️ Enhancement,⚠️ Interface,❗ Behavior,📝 Docs,🔨 Maintenance,🖱️ DX
-          none_of: Epic,💫 Good first issue
-          repo_token: ${{ secrets.GITHUB_TOKEN }}
-
-  check-title:
-    name: Check title
-    runs-on: ubuntu-24.04
-    steps:
-      - uses: actions/checkout@v4
-      - run: npm install @compwa/commitlint-config
-      - name: Create commitlint config
-        run: |
-          echo "module.exports = {extends: ['@compwa/commitlint-config']}" > commitlint.config.js
-      - uses: JulienKode/pull-request-name-linter-action@v0.5.0
+  lint-pr:
+    uses: ComPWA/actions/.github/workflows/pr-linting.yml@v2

README.md

@@ -10,7 +10,7 @@ jobs:
     name: pre-commit autoupdate
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Check if there are changes to pre-commit config