From 9e8b0fba903fb66c7e07e51fb8228e71326b45aa Mon Sep 17 00:00:00 2001
From: Dave Bunten <dave.bunten@cuanschutz.edu>
Date: Tue, 1 Oct 2024 15:32:37 -0600
Subject: [PATCH] ci(dependencies): update setup python action dependencies and
 dependabot settings (#457)

* ci(dependencies): update setup python action deps

* add dependabot update
---
 .github/actions/setup-env/action.yaml | 6 +++---
 .github/dependabot.yml                | 7 +++++++
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/.github/actions/setup-env/action.yaml b/.github/actions/setup-env/action.yaml
index 9b765846..6168ba94 100644
--- a/.github/actions/setup-env/action.yaml
+++ b/.github/actions/setup-env/action.yaml
@@ -27,7 +27,7 @@ runs:
   using: "composite"
   steps:
     - name: Set up Python ${{ inputs.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ inputs.python-version }}
     - name: Generate Cache Key PY (Linux)
@@ -46,7 +46,7 @@ runs:
       # This allows for caching the pre-commit hook installation across
       # jobs and workflows.
       if: ${{ inputs.cache-pre-commit == 'true' }}
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: |
           .cache
@@ -58,7 +58,7 @@ runs:
       # the poetry.lock file. This allows for caching the virtual
       # environment with all the dependencies.
       if: ${{ inputs.cache-venv == 'true' }}
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: |
           .cache
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c6a1d9d7..9f03cf85 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,7 +9,14 @@ updates:
   # See here for more information:
   # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates
   - package-ecosystem: "github-actions"
+    # checks for updates by default under `/.github/workflows`
     directory: "/"
     schedule:
       # Check for updates to GitHub Actions every week
       interval: "weekly"
+  - package-ecosystem: "github-actions"
+    # checks for updates under custom action setup-env
+    directory: "/.github/actions/setup-env"
+    schedule:
+      # Check for updates to GitHub Actions every week
+      interval: "weekly"