Merge pull request #434 from Workiva/gha-dart-publish

FEDX-1595: implemented gha-dart-oss publish

Author: rmconsole4-wk

.github/dependabot.yml

@@ -1,15 +1,19 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
 version: 2
 updates:
-  - package-ecosystem: "pub" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      gha:
+        patterns: ["*"]
+
+  - package-ecosystem: pub
+    directory: /
     schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 2
-    ignore:
-      - dependency-name: "*"
-        update-types: ["version-update:semver-major"]
+      interval: weekly
+    groups:
+      major:
+        update-types: ["major"]
+      minor:
+        update-types: ["minor", "patch"]

.github/workflows/ci.yml

@@ -1,20 +1,21 @@
 name: CI
 
 on:
+  pull_request:
   push:
     branches:
       - 'master'
       - 'test_consume_*'
-  pull_request:
-    branches:
-      - '**'
 
 permissions:
   pull-requests: write
   contents: write
   id-token: write
 
 jobs:
+  build:
+    uses: Workiva/gha-dart-oss/.github/workflows/[email protected]
+
   dart:
     strategy:
       fail-fast: false
@@ -38,10 +39,4 @@ jobs:
         if: ${{ matrix.sdk == 'stable' && matrix.os == 'ubuntu' }}
         run: dart run dart_dev format --check
       - name: Tests
-        run: dart run dart_dev test ${{ matrix.sdk != '2.19.6' && '--test-args="--exclude-tags dart2"' || '' }}
-      - name: SBOM
-        if: ${{ matrix.sdk == '2.19.6' && matrix.os == 'ubuntu' }}
-        uses: anchore/sbom-action@v0
-        with:
-          path: ./  # Assuming actions/checkout default location
-          format: cyclonedx-json
+        run: dart run dart_dev test ${{ matrix.sdk != '2.19.6' && '--test-args="--exclude-tags dart2"' || '' }}

.github/workflows/publish.yaml

@@ -0,0 +1,15 @@
+name: Publish
+
+on:
+  push:
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+
+permissions:
+  contents: write
+  id-token: write
+  pull-requests: write
+
+jobs:
+  publish:
+    uses: Workiva/gha-dart-oss/.github/workflows/[email protected]