From 13879746ab76aa3609f2177118b7d29a42010368 Mon Sep 17 00:00:00 2001
From: "claude[bot]" <209825114+claude[bot]@users.noreply.github.com>
Date: Sat, 8 Nov 2025 00:49:56 +0000
Subject: [PATCH] Update GitHub Actions versions to latest stable releases

- Updated actions/github-script from v6 to v8
- Updated actions/setup-node from v3 to v6
- Added dependabot.yml template for automated dependency updates

Resolves issue with dependabot complaints when using this copier template.

Co-authored-by: Chris Mungall <cmungall@users.noreply.github.com>
---
 template/.github/dependabot.yml          | 26 ++++++++++++++++++++++++
 template/.github/workflows/dragon-ai.yml |  4 ++--
 2 files changed, 28 insertions(+), 2 deletions(-)
 create mode 100644 template/.github/dependabot.yml

diff --git a/template/.github/dependabot.yml b/template/.github/dependabot.yml
new file mode 100644
index 0000000..f13e539
--- /dev/null
+++ b/template/.github/dependabot.yml
@@ -0,0 +1,26 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  # Enable version updates for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+    # Limit the number of open pull requests for version updates
+    open-pull-requests-limit: 5
+    # Add conventional commit prefixes
+    commit-message:
+      prefix: "chore(deps)"
+      include: "scope"
+    # Add reviewers (customize as needed)
+    # reviewers:
+    #   - "your-username"
+    # Add assignees (customize as needed)
+    # assignees:
+    #   - "your-username"
\ No newline at end of file
diff --git a/template/.github/workflows/dragon-ai.yml b/template/.github/workflows/dragon-ai.yml
index 584bb43..2dd14bd 100644
--- a/template/.github/workflows/dragon-ai.yml
+++ b/template/.github/workflows/dragon-ai.yml
@@ -29,7 +29,7 @@ jobs:
         
       - name: Check for qualifying mention
         id: check
-        uses: actions/github-script@v6
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.PAT_FOR_PR }}  # Use PAT instead of default token
           script: |
@@ -115,7 +115,7 @@ jobs:
         run: mkdir -p ${{ env.TOOLS_DIR }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
           node-version: '18'