Update dependencies and add dependabot.

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"

.github/workflows/ci.yml

@@ -18,20 +18,22 @@ jobs:
   pre_commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v1.35.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v5.33.0
       - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
       - id: changed-files
-        uses: tj-actions/changed-files@7fc073d92265804a8d4e4982b637dee053daf6c5 # v42.0.7
-      - name: Store changed files in env
-        run: echo "GITHUB_MODIFIED_FILES=${{ steps.changed-files.outputs.all_changed_files }}" >> $GITHUB_ENV
-      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v1.35.2
+        uses: Alfresco/alfresco-build-tools/.github/actions/[email protected]
+        with:
+          write-list-to-env: true
+      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v5.33.0
 
   test_scan:
     name: "Run test scan against this repository."
     runs-on: ubuntu-latest
     if: github.event_name == 'pull_request'
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: ./.
         with:
           create-github-annotations: "false"

action.yml

@@ -57,12 +57,12 @@ runs:
   using: "composite"
   steps:
     - name: Clone the full history
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         fetch-depth: 0
 
     - name: Download ruleset
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         repository: ${{ inputs.pmd-ruleset-repo }}
         ref: ${{ inputs.pmd-ruleset-ref }}
@@ -102,14 +102,14 @@ runs:
       shell: bash
 
     - name: Archive PMD summary
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       if: ${{ github.event_name == 'pull_request' }}
       with:
         name: PMD Summary (Human Readable)
         path: ${{ env.PMD_SUMMARY_FILE }}
 
     - name: Create GitHub annotations
-      uses: github/codeql-action/upload-sarif@v2
+      uses: github/codeql-action/upload-sarif@v3
       if: ${{ github.event_name == 'pull_request' && inputs.create-github-annotations == 'true' }}
       with:
         sarif_file: ${{ env.SARIF_REPORT_FILE }}