Bump dependencies by "Check updates #9" (#21)

* Bump dependencies by "Check updates #9"

* Add 'dependabot' support

* Add 'dependabot' support

* Add 'dependabot' support

Co-authored-by: fabasoad <fabasoad@users.noreply.github.com>
Co-authored-by: fabasoad <fabasoad@gmail.com>

.github/dependabot.yml

@@ -0,0 +1,19 @@
+---
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    reviewers:
+      - "fabasoad"
+    labels:
+      - "dependencies"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    reviewers:
+      - "fabasoad"
+    labels:
+      - "dependencies"

.github/workflows/create-release.yml

@@ -3,8 +3,8 @@ name: Create release
 
 on:
   push:
-    branches:
-      - main
+    tags:
+      - 'v*'
 
 jobs:
   create_release:
@@ -14,32 +14,33 @@ jobs:
       - uses: actions/checkout@v2.3.4
         with:
           fetch-depth: 0
-          ref: ${{ github.ref }}
-      - name: Get commits since last release
-        id: changes
-        uses: simbo/changes-since-last-release-action@v1
-      - name: Get latest version
-        id: substring
+      - name: Get latest release tag
+        id: latest_release
         run: |
-          ver=$(echo "${{ steps.changes.outputs.last-tag }}" | cut -c2-)
-          echo '::set-output name=version::'$ver
-      - name: Increase version
-        id: semver
-        uses: matt-FFFFFF/simple-semver@v0.1.0
-        with:
-          semver-input: ${{ steps.substring.outputs.version }}
-          increment: p
+          latest_tag=$(curl --silent "https://api.github.com/repos/${{ github.repository }}/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')
+          echo "::set-output name=tag::${latest_tag}"
+      - name: Get current release tag
+        id: current_release
+        run: echo "::set-output name=tag::${GITHUB_REF/refs\/tags\//}"
+      - name: Build changelog
+        id: changelog
+        run: |
+          body=$(git log --pretty=oneline ${{ steps.latest_release.outputs.tag }}..${{ steps.current_release.outputs.tag }})
+          body="${body//'%'/'%25'}"
+          body="${body//$'\n'/'%0A'}"
+          body="${body//$'\r'/'%0D'}"
+          echo "::set-output name=body::${body}"
       - name: Create release
         id: create_release
         uses: actions/create-release@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          tag_name: v${{ steps.semver.outputs.semver }}
-          release_name: v${{ steps.semver.outputs.semver }}
+          tag_name: ${{ github.ref }}
+          release_name: ${{ steps.current_release.outputs.tag }}
           body: |
-            # Changes
+            # Changelog
 
-            ${{ steps.changes.outputs.log }}
+            ${{ steps.changelog.outputs.body }}
           draft: false
           prerelease: false

.github/workflows/security-tests.yml

@@ -6,10 +6,8 @@ on:
     branches:
       - 'main'
       - 'bugfix/**'
-      - 'bump/patch-*'
+      - 'dependabot/*'
       - 'feature/**'
-  schedule:
-    - cron: '25 2 * * 6'
 
 jobs:
   snyk_tests:

.github/workflows/unit-tests.yml

@@ -6,7 +6,7 @@ on:
     branches:
       - 'main'
       - 'bugfix/**'
-      - 'bump/patch-*'
+      - 'dependabot/*'
       - 'feature/**'
 
 env:
@@ -27,7 +27,7 @@ jobs:
       - uses: actions/checkout@v2.3.4
       - name: Cache node_modules
         id: cache
-        uses: actions/cache@v2.1.4
+        uses: actions/cache@v2.1.5
         with:
           path: "**/node_modules"
           key: ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }}

.github/workflows/yaml-lint.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2.3.4
-      - uses: ibiqlik/action-yamllint@v3.0.0
+      - uses: ibiqlik/action-yamllint@v3.0.1
         with:
           config_file: .yamllint.yml
           strict: false

__tests__/fixture.js

@@ -26,7 +26,7 @@ module.exports = [{
   apiKey: process.env.SIGHTENGINE_API_USER +
     ',' + process.env.SIGHTENGINE_API_SECRET,
   threshold: {
-    positive: 0.44,
-    negative: 0.45,
+    positive: 0.73,
+    negative: 0.75,
   },
 }];

package.json

@@ -1,6 +1,6 @@
 {
   "name": "nsfw-detection-action",
-  "version": "1.3.13",
+  "version": "1.3.14",
   "description": "This GitHub action detects nsfw content in committed files.",
   "main": "dist/index.js",
   "repository": {
@@ -31,17 +31,17 @@
   },
   "homepage": "https://github.com/fabasoad/nsfw-detection-action#readme",
   "dependencies": {
-    "@actions/core": "1.2.6",
+    "@actions/core": "1.2.7",
     "@actions/github": "4.0.0",
     "form-data": "4.0.0",
     "got": "11.8.2",
-    "snyk": "1.522.0"
+    "snyk": "1.574.0"
   },
   "devDependencies": {
-    "@vercel/ncc": "0.27.0",
+    "@vercel/ncc": "0.28.4",
     "chai": "4.3.4",
     "dotenv": "8.2.0",
-    "eslint": "7.23.0",
+    "eslint": "7.25.0",
     "eslint-config-google": "0.14.0",
     "git-branch-is": "4.0.0",
     "husky": "6.0.0",