From 358a4a29f8109d7adc81b209035d382ad1fb9451 Mon Sep 17 00:00:00 2001 From: hatisuka <74543106+hatisuka@users.noreply.github.com> Date: Tue, 20 Oct 2026 11:48:37 +0900 Subject: [PATCH 1/2] =?UTF-8?q?chore(ci):=20workflow=20=E3=81=AE=E6=A8=A9?= =?UTF-8?q?=E9=99=90=E3=82=92=E6=98=8E=E7=A4=BA=E3=83=BBDependabot=20?= =?UTF-8?q?=E5=B0=8E=E5=85=A5?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/dependabot.yml | 16 ++++++++++++++++ .github/workflows/pr_check.yml | 8 ++++++++ .github/workflows/unit_test.yml | 3 +++ 3 files changed, 27 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..da059f2 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,16 @@ +version: 2 +updates: + # workflow の action（SHA 固定）を更新する。SHA と末尾の # vX.Y.Z コメントを合わせて書き換えた PR が作られる + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "10:00" + timezone: "Asia/Tokyo" + groups: + github-actions: + patterns: + - "*" + commit-message: + prefix: "chore(deps)" diff --git a/.github/workflows/pr_check.yml b/.github/workflows/pr_check.yml index 08d3e04..2899a5d 100644 --- a/.github/workflows/pr_check.yml +++ b/.github/workflows/pr_check.yml @@ -2,9 +2,17 @@ name: PR check on: [pull_request] +permissions: + contents: read + jobs: danger: runs-on: ubuntu-latest + permissions: + contents: read + pull-requests: write # Danger が PR にコメントするため + issues: read # Danger が PR の情報(ラベル等)を issues API で読むため + statuses: write # Danger が結果をコミットステータスに付けるため steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Java diff --git a/.github/workflows/unit_test.yml b/.github/workflows/unit_test.yml index e95f2f6..bc9435c 100644 --- a/.github/workflows/unit_test.yml +++ b/.github/workflows/unit_test.yml @@ -5,6 +5,9 @@ on: branches: - main +permissions: + contents: read + jobs: unit_test: runs-on: ubuntu-latest From fa051525c093a221318fc5ba563fb3e5b4762d00 Mon Sep 17 00:00:00 2001 From: hatisuka <74543106+hatisuka@users.noreply.github.com> Date: Tue, 20 Oct 2026 13:02:02 +0900 Subject: [PATCH 2/2] =?UTF-8?q?chore(ci):=20=E5=8B=95=E4=BD=9C=E3=81=97?= =?UTF-8?q?=E3=81=AA=E3=81=84=20actions/cache=20v2=20=E3=82=92=20v4.3.0=20?= =?UTF-8?q?=E3=81=AB=E4=B8=8A=E3=81=92=E3=82=8B?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/workflows/pr_check.yml | 4 ++-- .github/workflows/unit_test.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/pr_check.yml b/.github/workflows/pr_check.yml index 2899a5d..6217413 100644 --- a/.github/workflows/pr_check.yml +++ b/.github/workflows/pr_check.yml @@ -20,7 +20,7 @@ jobs: with: distribution: 'temurin' java-version: '17' - - uses: actions/cache@8492260343ad570701412c2f464a5877dc76bace # v2 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: | ~/.gradle/caches @@ -50,7 +50,7 @@ jobs: with: distribution: 'temurin' java-version: '17' - - uses: actions/cache@8492260343ad570701412c2f464a5877dc76bace # v2 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: | ~/.gradle/caches diff --git a/.github/workflows/unit_test.yml b/.github/workflows/unit_test.yml index bc9435c..aceb385 100644 --- a/.github/workflows/unit_test.yml +++ b/.github/workflows/unit_test.yml @@ -18,7 +18,7 @@ jobs: with: distribution: 'temurin' java-version: '17' - - uses: actions/cache@8492260343ad570701412c2f464a5877dc76bace # v2 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: | ~/.gradle/caches