Configure Dependabot to update deps in compoite actions

Author: Widcket

.github/actions/rl-scanner/action.yml

@@ -9,7 +9,6 @@ inputs:
     description: 'Version of the artifact.'
     required: true
 
-
 runs:
   using: 'composite'
   steps:
@@ -24,7 +23,7 @@ runs:
         pip install boto3 requests
 
     - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@v1
+      uses: aws-actions/configure-aws-credentials@ececac1a45f3b08a01d2dd070d28d111c5fe6722 // pin@v4.1.0
       with:
         role-to-assume: ${{ env.PRODSEC_TOOLS_ARN }}
         aws-region: 'us-east-1'
@@ -68,6 +67,6 @@ runs:
         fi
 
 outputs:
-    scan-status:
-        description: 'The outcome of the scan process.'
-        value: ${{ env.scan-status }}
+  scan-status:
+    description: 'The outcome of the scan process.'
+    value: ${{ env.scan-status }}

.github/actions/setup-android/action.yml

@@ -23,11 +23,11 @@ runs:
 
   steps:
     - name: Install Flutter
-      uses: subosito/flutter-action@48cafc24713cca54bbe03cdc3a423187d413aafa
+      uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff // pin@v2.18.0
       with:
-          flutter-version: ${{ inputs.flutter }}
-          channel: stable
-          cache: true
+        flutter-version: ${{ inputs.flutter }}
+        channel: stable
+        cache: true
 
     - name: Install Flutter dependencies
       working-directory: auth0_flutter/example

.github/actions/setup-darwin/action.yml

@@ -44,7 +44,7 @@ runs:
         working-directory: auth0_flutter/example/${{ steps.lowercase-platform.outputs.platform }}
 
     - name: Install Flutter
-      uses: subosito/flutter-action@48cafc24713cca54bbe03cdc3a423187d413aafa
+      uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff // pin@v2.18.0
       with:
         flutter-version: ${{ inputs.flutter }}
         channel: stable
@@ -65,7 +65,7 @@ runs:
 
     - id: restore-pods-cache
       name: Restore Pods cache
-      uses: actions/cache@f5ce41475b483ad7581884324a6eca9f48f8dcc7
+      uses: actions/cache@v4
       with:
         path: auth0_flutter/example/${{ steps.lowercase-platform.outputs.platform }}/Pods
         key: pods-${{ hashFiles('Podfile.lock') }}-${{ hashFiles('.xcode-version') }}-v1

.github/actions/setup-publish/action.yml

@@ -15,16 +15,16 @@ runs:
 
   steps:
     - name: Install Flutter
-      uses: subosito/flutter-action@48cafc24713cca54bbe03cdc3a423187d413aafa
+      uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff // pin@v2.18.0
       with:
-          flutter-version: ${{ inputs.flutter }}
-          channel: stable
-          cache: true
+        flutter-version: ${{ inputs.flutter }}
+        channel: stable
+        cache: true
 
     - name: Install Flutter dependencies
       working-directory: ${{ inputs.working-directory }}
       run: flutter pub get
       shell: bash
 
     - name: Setup Dart SDK for publishing # With JWT token
-      uses: dart-lang/setup-dart@b64355ae6ca0b5d484f0106a033dd1388965d06d
+      uses: dart-lang/setup-dart@e51d8e571e22473a2ddebf0ef8a2123f0ab2c02c // pin@v1.7.1

.github/dependabot.yml

@@ -41,3 +41,51 @@ updates:
     labels:
       - ignore title check
       - dependencies
+
+  - package-ecosystem: github-actions
+    directory: /.github/actions/rl-scanner
+    schedule:
+      interval: daily
+    labels:
+      - ignore title check
+      - dependencies
+
+  - package-ecosystem: github-actions
+    directory: /.github/actions/setup-android
+    schedule:
+      interval: daily
+    labels:
+      - ignore title check
+      - dependencies
+
+  - package-ecosystem: github-actions
+    directory: /.github/actions/setup-darwin
+    schedule:
+      interval: daily
+    labels:
+      - ignore title check
+      - dependencies
+
+  - package-ecosystem: github-actions
+    directory: /.github/actions/setup-publish
+    schedule:
+      interval: daily
+    labels:
+      - ignore title check
+      - dependencies
+
+  - package-ecosystem: github-actions
+    directory: /.github/actions/smoke-tests-darwin
+    schedule:
+      interval: daily
+    labels:
+      - ignore title check
+      - dependencies
+
+  - package-ecosystem: github-actions
+    directory: /.github/actions/unit-tests-darwin
+    schedule:
+      interval: daily
+    labels:
+      - ignore title check
+      - dependencies

.github/workflows/main.yml

@@ -29,7 +29,7 @@ jobs:
               uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
             - name: Install Flutter
-              uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff
+              uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff // pin@v2.18.0
               with:
                   flutter-version: ${{ env.flutter }}
                   channel: stable
@@ -52,7 +52,7 @@ jobs:
               uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
             - name: Install Flutter
-              uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff
+              uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff // pin@v2.18.0
               with:
                   flutter-version: ${{ env.flutter }}
                   channel: stable
@@ -71,7 +71,7 @@ jobs:
               uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
             - name: Install Flutter
-              uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff
+              uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff // pin@v2.18.0
               with:
                   flutter-version: ${{ env.flutter }}
                   channel: stable
@@ -102,7 +102,7 @@ jobs:
               uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
             - name: Install Flutter
-              uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff
+              uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff // pin@v2.18.0
               with:
                   flutter-version: ${{ env.flutter }}
                   channel: stable
@@ -329,7 +329,7 @@ jobs:
     #           uses: gradle/gradle-build-action@ef76a971e2fa3f867b617efd72f2fbd72cf6f8bc
 
     #         - name: AVD cache
-    #           uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84
+    #           uses: actions/cache@v4
     #           id: avd-cache
     #           with:
     #             path: |

.github/workflows/rl-scanner.yml

@@ -40,7 +40,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha || github.sha || github.ref }}
 
       - name: Set up Flutter
-        uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff
+        uses: subosito/flutter-action@f2c4f6686ca8e8d6e6d0f28410eeef506ed66aff // pin@v2.18.0
         with:
           flutter-version: ${{ inputs.flutter }}
           channel: stable