dependabot

.github/dependabot.yml

@@ -1,9 +1,22 @@
 version: 2
 updates:
-  # Enable version updates for npm
   - package-ecosystem: 'npm'
-    # Look for `package.json` and `lock` files in the `root` directory
     directory: '/'
-    # Check the npm registry for updates every day (weekdays)
     schedule:
       interval: 'daily'
+    labels:
+      - "dependencies"
+    groups:
+      npm:
+        patterns: 
+          - "*"
+  - directory: /
+    package-ecosystem: "github-actions"
+    schedule:
+      interval: "daily"
+    labels:
+      - "dependencies"
+    groups:
+      github-actions:
+        patterns: 
+          - "*"

.github/workflows/test.yaml

@@ -11,7 +11,7 @@ jobs:
   build: # make sure build/ci work properly
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - run: |
           npm install
       - run: |

.github/workflows/verify-labels.yaml

@@ -8,7 +8,7 @@ jobs:
   update_release_draft:
     runs-on: ubuntu-latest
     steps:
-      - uses: jesusvasquez333/verify-pr-label-action@2f0319c23a61915af52e8f905cf7c272be3b363d #v1.3.1
+      - uses: jesusvasquez333/verify-pr-label-action@657d111bbbe13e22bbd55870f1813c699bde1401 #v1.4.0
         with:
           github-token: '${{ secrets.GITHUB_TOKEN }}'
           valid-labels: 'bug, enhancement, maintenance'