From dbce4cb809e12e91d28587153ba4b7693e3a49dc Mon Sep 17 00:00:00 2001
From: Butterscotch! <bscotchvanilla@gmail.com>
Date: Wed, 25 Sep 2024 12:02:37 -0400
Subject: [PATCH] Add dependabot & update workflows (#344)

* Add dependabot & update workflows

* Specify python-version & use pip cache

* Add requirements.txt

* Cache PIP generally instead & remove requirements
---
 .github/dependabot.yml        |  8 ++++++++
 .github/workflows/actions.yml | 18 +++++++++++++-----
 .github/workflows/release.yml |  6 +++---
 3 files changed, 24 insertions(+), 8 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..df4d15b35
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,8 @@
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      # Check for updates to GitHub Actions every week
+      interval: "weekly"
diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
index 1ab87a928..d2714f081 100644
--- a/.github/workflows/actions.yml
+++ b/.github/workflows/actions.yml
@@ -9,21 +9,29 @@ jobs:
     runs-on: ubuntu-20.04
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
+      - uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/pip
+            ~/.platformio/.cache
+          key: ${{ runner.os }}-pio
 
       - name: Set up Python
-        uses: actions/setup-python@v1
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
 
-      - name: Install pio and its dependencies
+      - name: Install PlatformIO and its dependencies
         run: |
           python -m pip install --upgrade pip
-          pip install platformio
+          pip install --upgrade platformio
 
       - name: Run builds
         run: python ./ci/build.py
 
       - name: Upload binaries
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: binaries
           path: ./build/*.bin
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4aab4a714..553f1b86d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,6 +1,6 @@
 name: Releases
 
-on: 
+on:
   push:
     tags:
     - '*'
@@ -12,9 +12,9 @@ jobs:
     permissions:
       contents: write
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
     - uses: ncipollo/release-action@v1
       with:
         artifacts: "./build/*.bin"
         draft: true
-        token: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
+        token: ${{ secrets.GITHUB_TOKEN }}