chore: add dependabot to auto update github workflow files.

* update actions/download-artifact to v4.

* update actions/upload-artifact to v4.

Signed-off-by: Lan Liang <[email protected]>

Author: liangyuanpeng

.github/dependabot.yml

@@ -0,0 +1,13 @@
+# This YAML configuration file is used to enable Dependabot for automated dependency management.
+# Dependabot helps keep the project's dependencies up-to-date by automatically creating pull requests
+# for outdated dependencies based on the version constraints defined in your project.
+# For more information and customization options, please refer to the Dependabot documentation:
+# Documentation: https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically
+# Configuration options: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+version: 2
+updates:
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    # Check for updates to GitHub Actions every week
+    interval: "weekly"

.github/workflows/java-test.yaml

@@ -83,7 +83,7 @@ jobs:
         run: mvn clean package -DskipTests=true -Djni.classifier=${{ matrix.classifier }} -Dcargo-build.profile=release
 
       - name: 'Upload artifact'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: kcl-lib-${{ matrix.classifier }}
           path: |
@@ -103,25 +103,25 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Download windows x86_64 lib
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib-windows-x86_64
           path: java/native
 
       - name: Download linux aarch_64 lib
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib-linux-aarch_64
           path: java/native
 
       - name: Download darwin x86_64 lib
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib-osx-x86_64
           path: java/native
 
       - name: Download darwin aarch_64 lib
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib-osx-aarch_64
           path: java/native
@@ -135,7 +135,7 @@ jobs:
           "
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: kcl-lib
           path: java/target/*.jar
@@ -160,7 +160,7 @@ jobs:
           settings-path: ${{ github.workspace }} # location for the settings.xml file
 
       - name: Download Jar
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib
           path: java/release

.github/workflows/kotlin-test.yaml

@@ -83,7 +83,7 @@ jobs:
         run: mvn clean package -DskipTests=true -Djni.classifier=${{ matrix.classifier }} -Dcargo-build.profile=release
 
       - name: 'Upload artifact'
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: kcl-lib-${{ matrix.classifier }}
           path: |
@@ -103,25 +103,25 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Download windows x86_64 lib
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib-windows-x86_64
           path: kotlin/native
 
       - name: Download linux aarch_64 lib
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib-linux-aarch_64
           path: kotlin/native
 
       - name: Download darwin x86_64 lib
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib-osx-x86_64
           path: kotlin/native
 
       - name: Download darwin aarch_64 lib
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib-osx-aarch_64
           path: kotlin/native
@@ -135,7 +135,7 @@ jobs:
           "
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: kcl-lib
           path: kotlin/target/*.jar
@@ -160,7 +160,7 @@ jobs:
           settings-path: ${{ github.workspace }} # location for the settings.xml file
 
       - name: Download Jar
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: kcl-lib
           path: kotlin/release

.github/workflows/nodejs-test.yaml

@@ -117,7 +117,7 @@ jobs:
         shell: bash
         working-directory: .
         run: ${{ matrix.settings.build }}
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: bindings-linux-${{ matrix.settings.target }}
           path: nodejs/*.node
@@ -157,7 +157,7 @@ jobs:
       - name: Build
         shell: bash
         run: ${{ matrix.settings.build }}
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: bindings-windows-${{ matrix.settings.target }}
           path: nodejs/*.node
@@ -207,7 +207,7 @@ jobs:
       - name: Build
         run: ${{ matrix.settings.build }}
         shell: bash
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: bindings-macos-${{ matrix.settings.target }}
           path: nodejs/*.node
@@ -240,7 +240,7 @@ jobs:
         run: pnpm install --no-save --frozen-lockfile
 
       - name: Download all artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           path: nodejs/artifacts
       - name: Move artifacts

.github/workflows/python-test.yaml

@@ -37,7 +37,7 @@ jobs:
           command: sdist
           args: -o dist
       - name: Upload sdist
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: wheels
           path: python/dist
@@ -60,7 +60,7 @@ jobs:
           # Workaround ring 0.17 build issue
           CFLAGS_aarch64_unknown_linux_gnu: "-D__ARM_ARCH=8"
       - name: Upload wheels
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: wheels
           path: python/dist
@@ -75,7 +75,7 @@ jobs:
           command: build
           args: --release -o dist --find-interpreter
       - name: Upload wheels
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: wheels
           path: python/dist
@@ -91,7 +91,7 @@ jobs:
           target: universal2-apple-darwin
           args: --release -o dist --find-interpreter
       - name: Upload wheels
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: wheels
           path: python/dist
@@ -105,7 +105,7 @@ jobs:
       id-token: write
     needs: [ macos, linux, windows ]
     steps:
-      - uses: actions/download-artifact@v3
+      - uses: actions/download-artifact@v4
         with:
           name: wheels
           path: python/dist