Merge pull request #86 from dorssel/update_actions

Update GitHub actions

.github/dependabot.yml

@@ -3,6 +3,8 @@
 # SPDX-License-Identifier: MIT
 
 ---
+# yaml-language-server: $schema=https://json.schemastore.org/dependabot-2.0.json
+
 # To get started with Dependabot version updates, you'll need to specify which
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:
@@ -18,3 +20,7 @@ updates:
     directory: '/'
     schedule:
       interval: 'daily'
+    groups:
+      mstest:
+        patterns:
+          - 'MSTest.*'

.github/workflows/devskim.yml

@@ -0,0 +1,45 @@
+# SPDX-FileCopyrightText: 2024 Frans van Dorsselaer
+#
+# SPDX-License-Identifier: MIT
+
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+name: DevSkim
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+  schedule:
+    - cron: '22 14 * * 6'
+
+permissions: read-all
+
+jobs:
+  lint:
+    name: DevSkim
+    runs-on: ubuntu-latest
+
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Run DevSkim scanner
+        uses: microsoft/DevSkim-Action@v1
+
+      - name: Upload DevSkim scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: devskim-results.sarif

.github/workflows/dotnet.yml

@@ -49,6 +49,6 @@ jobs:
             **/*.snupkg
 
       - name: Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/lint.yml

@@ -0,0 +1,25 @@
+# SPDX-FileCopyrightText: 2023 Frans van Dorsselaer
+#
+# SPDX-License-Identifier: MIT
+
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+
+name: Lint
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  REUSE:
+    uses: dorssel/workflows/.github/workflows/REUSE.yml@main
+
+  MegaLinterNET:
+    uses: dorssel/workflows/.github/workflows/mega-linter-dotnet.yml@main

.github/workflows/update-dotnet-sdk.yml

@@ -0,0 +1,21 @@
+# SPDX-FileCopyrightText: 2024 Frans van Dorsselaer
+#
+# SPDX-License-Identifier: MIT
+
+---
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+
+name: UpdateSDK
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '12 11 * * *'
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  UpdateSDK:
+    uses: dorssel/workflows/.github/workflows/update-dotnet-sdk.yml@main

Directory.Packages.props

@@ -13,8 +13,8 @@ SPDX-License-Identifier: MIT
     <!-- UnitTests -->
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.8.0" />
     <PackageVersion Include="Moq" Version="4.20.70" />
-    <PackageVersion Include="MSTest.TestAdapter" Version="3.1.1" />
-    <PackageVersion Include="MSTest.TestFramework" Version="3.1.1" />
+    <PackageVersion Include="MSTest.TestAdapter" Version="3.2.0" />
+    <PackageVersion Include="MSTest.TestFramework" Version="3.2.0" />
     <PackageVersion Include="System.IO.Pipelines" Version="8.0.0" />
     <PackageVersion Include="coverlet.collector" Version="6.0.0" />
   </ItemGroup>

global.json

@@ -1,6 +1,6 @@
 {
   "sdk": {
-    "version": "8.0.100",
+    "version": "8.0.101",
     "allowPrerelease": false,
     "rollForward": "latestFeature"
   }