Merge pull request #24 from roanutil/3.0-preview-update-workflow

3.0 preview update workflow

Author: r-jarvis

.github/dependabot.yml

@@ -3,7 +3,5 @@ updates:
   - package-ecosystem: "swift"
     directory: "/"
     schedule:
-      interval: "weekly"
-    reviewers:
-      - "roanutil"
+      interval: "daily"
     versioning-strategy: "increase-if-necessary"

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: macos-13
     environment: default
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Format lint
         run: swiftformat --lint .
       - name: Lint
@@ -25,12 +25,12 @@ jobs:
       matrix:
         include:
           - os: macos-13
-            xcode: 14.3 # Swift 5.8
+            xcode: 14.3.1 # Swift 5.8.1
           - os: macos-13
-            xcode: '15.0' # Swift 5.9
+            xcode: '15.2' # Swift 5.9.2
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Select Xcode ${{ matrix.xcode }}
         run: sudo xcode-select -s /Applications/Xcode_${{ matrix.xcode }}.app
       - name: Run Tests
@@ -39,4 +39,5 @@ jobs:
         run: xcrun llvm-cov export -format="lcov" .build/debug/CoreDataRepositoryPackageTests.xctest/Contents/MacOS/CoreDataRepositoryPackageTests -instr-profile .build/debug/codecov/default.profdata > coverage_report.lcov
       - uses: codecov/codecov-action@v3
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true # optional (default = false)

.github/workflows/codeql.yml

@@ -0,0 +1,29 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "main", "3.0-preview" ]
+  pull_request:
+    branches: [ "main", "3.0-preview" ]
+
+jobs:
+  run-codeql-linux:
+    name: Run CodeQL on macOS
+    runs-on: macos-latest
+    permissions:
+      security-events: write
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: swift
+
+    - name: Build
+      run: swift build
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2