Merge branch 'main' into static-scanning

Signed-off-by: Justin Abrahms <[email protected]>

.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  # Maintain dependencies for npm
+  - package-ecosystem: "maven"
+    directory: "/"
+    commit-message:
+      prefix: "chore"
+    schedule:
+      interval: "weekly"

.github/workflows/merge.yml

@@ -12,13 +12,14 @@ on:
     branches: [ master, main ]
 
 permissions:
-  packages: write
   contents: read
 
 jobs:
   build:
 
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
 
     steps:
     - uses: actions/checkout@v3

.github/workflows/pullrequest.yml

@@ -3,7 +3,6 @@ on:
   pull_request:
     branches: [ master, main ]
 permissions:
-  packages: write
   contents: read
 
 jobs:
@@ -15,6 +14,8 @@ jobs:
         ports:
           - 8013:8013
 
+    permissions:
+      packages: write
     steps:
       - name: Check out the code
         uses: actions/checkout@v3

.github/workflows/static-code-scanning.yaml

@@ -3,10 +3,6 @@ name: "Code Scanning - Action"
 # Docs for this at https://github.com/github/codeql-action#usage
 
 on:
-  # push:
-  #   branches: [main]
-  # pull_request:
-  #   branches: [main]
   schedule:
     #        ┌───────────── minute (0 - 59)
     #        │  ┌───────────── hour (0 - 23)

pom.xml

@@ -145,7 +145,7 @@
         <dependency>
             <groupId>io.cucumber</groupId>
             <artifactId>cucumber-bom</artifactId>
-            <version>7.8.0</version>
+            <version>7.8.1</version>
             <type>pom</type>
             <scope>import</scope>
         </dependency>