Merge remote-tracking branch 'refs/remotes/origin/main' into prototype

Author: Aaron-Ritter

.github/dependabot.yml

@@ -0,0 +1,27 @@
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/" # Uses default location of GitHub Workflows
+    schedule:
+      interval: "weekly"
+    groups:
+      prod-github-actions:
+        dependency-type: "production"
+      dev-github-actions:
+        dependency-type: "development"
+
+  # Maintain dependencies for Gradle
+  - package-ecosystem: "swift"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      gradle-minor-dependencies:
+        update-types:
+          - "minor"
+          - "patch"

.github/workflows/codeql.yml

@@ -51,7 +51,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        swift: ["5.10.1", "5.10.0"]
+        swift: ["5.10.1"]
         os: [macos-latest]
         include:
           - language: swift
@@ -66,7 +66,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
       - name: Initialize latest xcode
-        uses: maxim-lobanov/setup-xcode@v1
+        uses: maxim-lobanov/setup-xcode@v1.6.0
         with:
           xcode-version: latest-stable
 

.github/workflows/swiftlint.yml

@@ -34,7 +34,7 @@ jobs:
 
       # Performs analysis using Swift Lint and outputs a Sarif Report
       - name: GitHub Action for SwiftLint
-        uses: stanfordbdhg/action-swiftlint@v4
+        uses: stanfordbdhg/action-swiftlint@v4.0.0
         with:
           args: --reporter sarif --output lint-results-debug.sarif
           # https://github.com/realm/SwiftLint/issues/4048