From 06e6c3a530c0392acae06a2e6fd66b2aea656033 Mon Sep 17 00:00:00 2001
From: Madhavan Sridharan <madhavan.sridharan@datastax.com>
Date: Fri, 9 Feb 2024 17:08:59 -0500
Subject: [PATCH] upgrade GHA jobs to use node 20 and add dependabot for GHA
 auto-updates

---
 .github/dependabot.yml        | 13 +++++++++++++
 .github/workflows/build.yml   |  2 +-
 .github/workflows/preview.yml | 12 ++++++------
 .github/workflows/release.yml | 20 ++++++++++----------
 4 files changed, 30 insertions(+), 17 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..25688a193b
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,13 @@
+# Set update schedule for GitHub Actions
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "monthly"
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 196d6e95ee..088a8cf217 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,7 +26,7 @@ jobs:
           java-version: '21'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 82f0b1fe8a..ddcfb97700 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -22,10 +22,10 @@ jobs:
     steps:
 
       - name: checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: setup java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'oracle'
           java-version: '21'
@@ -47,7 +47,7 @@ jobs:
           df -h
 
       - name: Cache Maven packages
-        uses: actions/cache@v3.2.3
+        uses: actions/cache@v4
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -70,16 +70,16 @@ jobs:
           mvn clean verify -Drevision="${{ env.PREVIEW_VERSION }}"
 
       - name: Setup docker buildx
-        uses: docker/setup-buildx-action@v2.2.1
+        uses: docker/setup-buildx-action@v3
 
       - name: docker hub login
-        uses: docker/login-action@v2.1.0
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: docker test build
-        uses: docker/build-push-action@v3.3.0
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: Dockerfile
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8e2e7cddb5..92b7dec7f1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,10 +19,10 @@ jobs:
     steps:
 
       - name: checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: setup java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'oracle'
           java-version: '21'
@@ -44,7 +44,7 @@ jobs:
           df -h
 
       - name: Cache Maven packages
-        uses: actions/cache@v3.2.3
+        uses: actions/cache@v4
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -65,10 +65,10 @@ jobs:
           mvn clean package -Drevision="${{ env.RELEASE_VERSION }}" -P enable-container-tests
 
       - name: Setup docker buildx
-        uses: docker/setup-buildx-action@v2.2.1
+        uses: docker/setup-buildx-action@v3
 
       - name: docker hub login
-        uses: docker/login-action@v2.1.0
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
@@ -95,7 +95,7 @@ jobs:
           cp nb5/target/nb5.jar nb5/target/nb5 staging
 
       - name: upload artifacts
-        uses: actions/upload-artifact@v1
+        uses: actions/upload-artifact@v4
         with:
           name: binaries
           path: staging
@@ -105,7 +105,7 @@ jobs:
       #        continue-on-error: false
       #
       #      - name: upload javadoc
-      #        uses: actions/upload-artifact@v3
+      #        uses: actions/upload-artifact@v4
       #        with:
       #          name: javadoc
       #          path: target/nosqlbench-*-javadoc.jar
@@ -115,7 +115,7 @@ jobs:
           scripts/bump-minor-version
 
       - name: docker push to hub
-        uses: docker/build-push-action@v3.3.0
+        uses: docker/build-push-action@v5
         with:
           context: .
           platforms: linux/amd64,linux/arm64
@@ -178,7 +178,7 @@ jobs:
 
       - name: Archive Test Results
         if: always()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: test-results
           path: |
@@ -193,7 +193,7 @@ jobs:
 #      - name: set git email
 #        run: git config --global user.name "${{ secrets.NBDROID_NAME }}"
 #      - name: download javadocs
-#        uses: actions/download-artifact@v3
+#        uses: actions/download-artifact@v4
 #        with:
 #          name: javadoc
 #      - run: ls -la