From f478c00734199818cb94a0d5dd0352711e13e27c Mon Sep 17 00:00:00 2001
From: Christian Clauss <cclauss@me.com>
Date: Tue, 9 Apr 2024 08:48:08 +0200
Subject: [PATCH] Keep GitHub Actions up to date with GitHub's Dependabot (#19)

Automation that fixes software supply chain warnings like at the bottom right of
https://github.com/exercism/free-pascal/actions/runs/8474048489

* https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
* https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem
---
 .github/dependabot.yml            |  9 +++++++++
 .github/workflows/test-report.yml | 20 ++++++++++++++++++++
 .github/workflows/test.yml        |  8 ++++----
 3 files changed, 33 insertions(+), 4 deletions(-)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/test-report.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..ed8f4a4
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,9 @@
+version: 2
+
+updates:
+
+  # Keep dependencies for GitHub Actions up-to-date
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'daily'
diff --git a/.github/workflows/test-report.yml b/.github/workflows/test-report.yml
new file mode 100644
index 0000000..f0b29dd
--- /dev/null
+++ b/.github/workflows/test-report.yml
@@ -0,0 +1,20 @@
+name: 'Test Report'
+on:
+  workflow_run:
+    workflows: ['free-pascal / Test']     # runs after free-pascal / Test workflow
+    types:
+      - completed
+permissions:
+  contents: read
+  actions: read
+  checks: write
+jobs:
+  report:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: dorny/test-reporter@v1
+      with:
+        artifact: test-results            # artifact name
+        name: test-results                  # Name of the check run which will be created
+        path: '*.xml'                     # Path to test results (inside artifact .zip)
+        reporter: java-junit              # Format of test results
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1ddea47..dc60860 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -39,10 +39,10 @@ jobs:
         run: bin/test
 
       - name: Report
-        uses: dorny/test-reporter@afe6793191b75b608954023a46831a3fe10048d4
+        uses: dorny/test-reporter@eaa763f6ffc21c7a37837f56cd5f9737f27fc6c8
         if: always()
         with:
-          name: Junit Test Results
-          path: build/**/junit-report-*.xml
+          name: test-results
+          path: junit-report.xml
           reporter: java-junit
-          fail-on-error: true
\ No newline at end of file
+          fail-on-error: true