build: Monthly maintenance (Aug 2025) (#127)

Bump GitHub Actions to latest versions & update dependabot config to take
care only about GHA updates.

Author: playpauseandstop

.github/CODEOWNERS

@@ -0,0 +1 @@
+. @playpauseanstop

.github/dependabot.yml

@@ -1,26 +1,18 @@
 version: 2
 updates:
-  - package-ecosystem: "docker"
-    directory: "/"
-    schedule:
-      interval: "monthly"
-      time: "03:00"
-    open-pull-requests-limit: 10
-    reviewers:
-      - "playpauseandstop"
-    labels:
-      - "build"
-      - "dependencies"
-
   - package-ecosystem: "github-actions"
-    directory: "/"
+    directories:
+      - "/**/*"
     schedule:
       interval: "monthly"
       time: "05:00"
     open-pull-requests-limit: 10
-    reviewers:
+    assignees:
       - "playpauseandstop"
     labels:
       - "build"
-      - "dependencies"
       - "ci"
+      - "dependencies"
+    groups:
+      ci-dependencies:
+        patterns: ["*"]

.github/workflows/ci.yml

@@ -18,29 +18,29 @@ jobs:
     runs-on: "ubuntu-latest"
 
     steps:
-      - uses: "actions/checkout@v4.1.1"
+      - uses: "actions/checkout@v4.2.2"
 
       - name: "Cache Docker layers"
-        uses: "actions/cache@v4.0.0"
+        uses: "actions/cache@v4.2.4"
         with:
           path: "/tmp/.buildx-cache"
           key: "${{ runner.os }}-buildx-${{ github.sha }}"
           restore-keys:
             ${{ runner.os }}-buildx-
 
       - name: "Login to Docker Hub"
-        uses: "docker/login-action@v3.0.0"
+        uses: "docker/login-action@v3.5.0"
         with:
           username: "${{ secrets.DOCKER_HUB_USERNAME }}"
           password: "${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}"
 
       - id: "buildx"
         name: "Setup Docker Buildx"
-        uses: "docker/setup-buildx-action@v3.0.0"
+        uses: "docker/setup-buildx-action@v3.11.1"
 
       - id: "docker_build"
         name: "Build Docker image"
-        uses: "docker/build-push-action@v5.1.0"
+        uses: "docker/build-push-action@v6.18.0"
         with:
           builder: "${{ steps.buildx.outputs.name }}"
           context: "./"
@@ -61,25 +61,25 @@ jobs:
     runs-on: "ubuntu-latest"
 
     steps:
-      - uses: "actions/checkout@v4.1.1"
+      - uses: "actions/checkout@v4.2.2"
 
       - name: "Cache Docker layers"
-        uses: "actions/cache@v4.0.0"
+        uses: "actions/cache@v4.2.4"
         with:
           path: "/tmp/.buildx-cache"
           key: "${{ runner.os }}-buildx-${{ github.sha }}"
           restore-keys:
             ${{ runner.os }}-buildx-
 
       - name: "Login to Docker Hub"
-        uses: "docker/login-action@v3.0.0"
+        uses: "docker/login-action@v3.5.0"
         with:
           username: "${{ secrets.DOCKER_HUB_USERNAME }}"
           password: "${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}"
 
       - id: "buildx"
         name: "Setup Docker Buildx"
-        uses: "docker/setup-buildx-action@v3.0.0"
+        uses: "docker/setup-buildx-action@v3.11.1"
 
       - id: "deploy_info"
         name: "Setup deploy info"
@@ -98,7 +98,7 @@ jobs:
 
       - id: "docker_build"
         name: "Build & push Docker image"
-        uses: "docker/build-push-action@v5.1.0"
+        uses: "docker/build-push-action@v6.18.0"
         with:
           builder: "${{ steps.buildx.outputs.name }}"
           context: "./"

.github/workflows/release_tag.yml

@@ -27,13 +27,13 @@ jobs:
           app_id: "${{ secrets.BADABUMP_APP_ID }}"
           private_key: "${{ secrets.BADABUMP_APP_PRIVATE_KEY }}"
 
-      - uses: "actions/checkout@v4.1.1"
+      - uses: "actions/checkout@v4.2.2"
         with:
           ref: "main"
           token: "${{ steps.token.outputs.token }}"
 
       - name: "Install Python"
-        uses: "actions/setup-python@v5.0.0"
+        uses: "actions/setup-python@v5.6.0"
         with:
           python-version: "${{ env.PYTHON_VERSION }}"