From 19641313bd5f983a1ce5144e097fc8309594359a Mon Sep 17 00:00:00 2001
From: Tommy Chow <tommyxchow@gmail.com>
Date: Fri, 2 Jan 2026 01:22:11 -0500
Subject: [PATCH] update GitHub Actions and add Dependabot config

---
 .github/dependabot.yml              | 33 +++++++++++++++++++++++++++++
 .github/workflows/gh-release.yml    |  4 ++--
 .github/workflows/store-release.yml |  2 +-
 3 files changed, 36 insertions(+), 3 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..9d449f02
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,33 @@
+version: 2
+updates:
+  # Keep GitHub Actions up to date
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "ci"
+    groups:
+      actions:
+        patterns:
+          - "*"
+
+  # Keep Ruby gems (fastlane) up to date
+  - package-ecosystem: "bundler"
+    directory: "/android"
+    schedule:
+      interval: "monthly"
+
+  - package-ecosystem: "bundler"
+    directory: "/ios"
+    schedule:
+      interval: "monthly"
+
+  # Keep Dart/Flutter packages up to date
+  - package-ecosystem: "pub"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major"]
diff --git a/.github/workflows/gh-release.yml b/.github/workflows/gh-release.yml
index 015cf714..bb03885a 100644
--- a/.github/workflows/gh-release.yml
+++ b/.github/workflows/gh-release.yml
@@ -23,7 +23,7 @@ jobs:
       
       # Setup Java so that we can build the APK.
       - name: Set up Java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 21
@@ -54,7 +54,7 @@ jobs:
       
       # Create a draft release on GitHub.
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           draft: true
           generate_release_notes: true
diff --git a/.github/workflows/store-release.yml b/.github/workflows/store-release.yml
index 8583ef60..8a3ec393 100644
--- a/.github/workflows/store-release.yml
+++ b/.github/workflows/store-release.yml
@@ -40,7 +40,7 @@ jobs:
 
       # Setup Java so that we can build the appbundle.
       - name: Set up Java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 21