Update actions/checkout action to v4

Reviewed-on: #1

.github/workflows/bump-version.yml

@@ -1,34 +0,0 @@
-name: "Bump Version"
-
-on:
-  push:
-    branches:
-      - "master"
-    paths-ignore:
-      - 'package.json'
-      - 'CHANGELOG.md'
-
-jobs:
-  bump-version:
-    name: "Bump Version on master"
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: "Checkout source code"
-        uses: "actions/checkout@v2"
-        with:
-          ref: ${{ github.ref }}
-      - name: "cat package.json"
-        run: cat ./package.json
-      - name: "Setup Node.js"
-        uses: "actions/setup-node@v1"
-        with:
-          node-version: 12
-      - name: "Automated Version Bump"
-        uses: "phips28/gh-action-bump-version@master"
-        with:
-          tag-prefix: ''
-        env:
-          GITHUB_TOKEN: ${{ secrets.BUMP_VERSION_TOKEN }}
-      - name: "cat package.json"
-        run: cat ./package.json

.github/workflows/codacy-analysis.yml

@@ -24,7 +24,7 @@ jobs:
     steps:
       # Checkout the repository to the GitHub Actions runner
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       # Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
       - name: Run Codacy Analysis CLI

.github/workflows/codeql-analysis.yml

@@ -35,7 +35,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/node.js.yml

@@ -13,16 +13,31 @@ on:
       - 'Dockerfile'
   pull_request:
     branches: [ master ]
-
+  pull_request_target:
+    branches: [ master ]
+    
 jobs:
-  build:
+  test:
     runs-on: ubuntu-latest
+    # If the PR is coming from a fork (pull_request_target), ensure it's opened by "dependabot[bot]".
+    # Otherwise, clone it normally.
+    if: |
+     (github.event_name == 'pull_request_target' && github.actor == 'dependabot[bot]') ||
+     (github.event_name != 'pull_request_target' && github.actor != 'dependabot[bot]')
+
     strategy:
       matrix:
         node-version: [15.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
     steps:
-    - uses: actions/checkout@v2
+    - name: Checkout
+      if: ${{ github.event_name != 'pull_request_target' }}
+      uses: actions/checkout@v4
+    - name: Checkout PR
+      if: ${{ github.event_name == 'pull_request_target' }}
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.pull_request.head.sha }}
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v2
       with:
@@ -35,9 +50,8 @@ jobs:
       with:
         project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
 
-
   deploy:
-    needs: build
+    needs: test
     if: ${{github.event_name == 'push'}} 
     runs-on: ubuntu-latest
     steps:

package.json

@@ -1,10 +1,11 @@
 {
     "name": "dsabot",
-    "version": "1.6.5",
+    "version": "1.6.6",
     "description": "",
     "main": "index.js",
     "scripts": {
         "lint": "eslint commands/",
+        "preinstall": "npx npm-force-resolutions",
         "start": "node index.js",
         "test": "jest --collectCoverage"
     },
@@ -18,21 +19,21 @@
     "license": "ISC",
     "dependencies": {
         "discord.js": "^12.5.3",
-        "dotenv": "^9.0.0",
+        "dotenv": "^16.0.0",
-        "got": "^11.8.2",
+        "got": "^11.8.3",
         "module-alias": "^2.2.2",
-        "nedb-promises": "^4.1.3"
+        "nedb-promises": "^6.0.3"
     },
     "devDependencies": {
-        "@types/jest": "^26.0.23",
+        "@types/jest": "^27.4.1",
-        "babel-jest": "^26.6.3",
+        "babel-jest": "^27.5.1",
         "babel-plugin-module-resolver": "^4.1.0",
         "babel-plugin-rewire": "^1.2.0",
-        "eslint": "^7.25.0",
+        "eslint": "^8.13.0",
-        "eslint-config-airbnb": "^18.2.1",
+        "eslint-config-airbnb": "^19.0.2",
-        "eslint-config-prettier": "^8.3.0",
+        "eslint-config-prettier": "^8.5.0",
-        "eslint-plugin-prettier": "^3.4.0",
+        "eslint-plugin-prettier": "^4.0.0",
-        "jest": "^26.6.3"
+        "jest": "^27.5.1"
     },
     "jest": {
         "collectCoverage": true,
@@ -52,5 +53,9 @@
             "<rootDir>/__mocks__/"
         ],
         "coverageDirectory": "coverage"
+    },
+    "resolutions": {
+        "normalize-url": ">=4.5.1",
+        "path-parse": ">=1.0.7"
     }
 }

renovate.json

@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}