ci: update WF versions and add dependabot config file (#15)

.github/dependabot.yml

@@ -0,0 +1,14 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "chore"
+  - package-ecosystem: "terraform"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "chore"

.github/workflows/docs.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.ref }}
 
@@ -17,6 +17,7 @@ jobs:
           working-dir: ./examples/basic/
           git-push: "false"
           output-file: README.md
+          config-file: ./examples/basic/.terraform-docs.yml
 
       - name: Render terraform docs inside the README.md
         uses: terraform-docs/[email protected]

.github/workflows/labeler.yml

@@ -8,7 +8,7 @@ jobs:
     name: Auto Label
     runs-on: ubuntu-latest
     steps:
-      - uses: fuxingloh/[email protected].2
+      - uses: fuxingloh/[email protected].3
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           config-path: .github/labeler.yml

.github/workflows/labels.yml

@@ -3,7 +3,6 @@ name: Sync labels
 on:
   push:
     branches:
-      - master
       - main
 
 jobs:
@@ -12,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Sync labels
         uses: micnncim/[email protected]

.github/workflows/pr-lint.yml

@@ -2,22 +2,37 @@ name: PR title conformance
 
 on:
   pull_request_target:
+    types:
+      - opened
+      - edited
+      - synchronize
 
 jobs:
   lint-pr:
     runs-on: ubuntu-latest
 
     steps:
       - name: Lint PR
-        uses: aslafy-z/[email protected]
+        uses: amannn/action-semantic-pull-request@v5
         with:
-          preset: conventional-changelog-angular@^5.0.6
+          types: |
+            build
+            ci
+            docs
+            feat
+            fix
+            perf
+            refactor
+            style
+            test
+            chore
+          requireScope: false
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Comment for PR title conformance
         if: failure()
-        uses: peter-evans/create-or-update-comment@v2
+        uses: peter-evans/create-or-update-comment@v3
         with:
           issue-number: ${{tojson(github.event.number)}}
           body: |

.github/workflows/release.yml

@@ -3,7 +3,6 @@ name: Release Drafter
 on:
   push:
     branches:
-      - master
       - main
 
 jobs:

.github/workflows/stale.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/stale@v6
+      - uses: actions/stale@v9
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           stale-issue-message: "This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days"

.github/workflows/terraform.yml

@@ -9,12 +9,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
+        uses: hashicorp/setup-terraform@v3
         with:
-          terraform_version: 1.3.0
+          terraform_version: 1.6.6
 
       - name: Ensure Terraform code is formated
         run: terraform fmt -check

.github/workflows/tflint.yml

@@ -9,12 +9,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
+        uses: hashicorp/setup-terraform@v3
         with:
-          terraform_version: 1.3.0
+          terraform_version: 1.6.6
 
       - name: Terraform Init
         run: terraform init
@@ -25,5 +25,5 @@ jobs:
           github_token: ${{ secrets.github_token }}
           reporter: github-pr-review
           fail_on_error: "true"
-          filter_mode: "nofilter"
+          filter_mode: "diff_context"
           flags: "--module"

.github/workflows/tfsec.yml

@@ -10,12 +10,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
+        uses: hashicorp/setup-terraform@v3
         with:
-          terraform_version: 1.3.0
+          terraform_version: 1.6.6
 
       - name: Terraform Init
         run: terraform init
@@ -25,6 +25,6 @@ jobs:
         with:
           github_token: ${{ secrets.github_token }}
           reporter: github-pr-review
-          filter_mode: nofilter
+          filter_mode: diff_context
           fail_on_error: true
           tfsec_flags: "--exclude-downloaded-modules"

README.md

@@ -14,7 +14,7 @@ module "aweasome_module" {
 
 | Name | Version |
 |------|---------|
-| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0 |
+| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.3 |
 ## Providers
 
 No providers.

examples/basic/README.md

@@ -1,7 +1,9 @@
 <!-- BEGIN_TF_DOCS -->
 ## Requirements
 
-No requirements.
+| Name | Version |
+|------|---------|
+| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.3 |
 
 ## Providers
 

examples/basic/versions.tf

@@ -0,0 +1,3 @@
+terraform {
+  required_version = ">= 1.3"
+}

versions.tf

@@ -1,3 +1,3 @@
 terraform {
-  required_version = ">= 1.0"
+  required_version = ">= 1.3"
 }