From 3407972ec971cd95e7ed04faa118b5a1e39ef29f Mon Sep 17 00:00:00 2001
From: Eric Greer <eric@apsis.io>
Date: Wed, 5 Aug 2026 12:00:16 -0400
Subject: [PATCH 1/3] update github action versions

---
 .github/lint_and_test.yaml | 26 ++++++++++++--------------
 1 file changed, 12 insertions(+), 14 deletions(-)

diff --git a/.github/lint_and_test.yaml b/.github/lint_and_test.yaml
index 8a7342d..21af1a5 100644
--- a/.github/lint_and_test.yaml
+++ b/.github/lint_and_test.yaml
@@ -24,9 +24,9 @@ jobs:
       js: ${{ steps.filter.outputs.js }}
       terraform: ${{ steps.filter.outputs.terraform }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       # For pull requests it's not necessary to checkout the code, for main it is
-      - uses: dorny/paths-filter@v3
+      - uses: dorny/paths-filter@v4
         id: filter
         with:
           filters: |
@@ -54,11 +54,11 @@ jobs:
     needs: [changes]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: "3.4"
+          ruby-version: "4"
           bundler-cache: true
 
       - name: Rubocop
@@ -70,8 +70,8 @@ jobs:
     needs: [changes]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version-file: ".nvmrc"
           cache: "npm"
@@ -87,8 +87,8 @@ jobs:
     needs: [changes]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: hashicorp/setup-terraform@v3
+      - uses: actions/checkout@v7
+      - uses: hashicorp/setup-terraform@v4
       - name: Run terraform fmt
         working-directory: terraform
         run: terraform fmt -check -recursive .
@@ -98,11 +98,9 @@ jobs:
     needs: [changes]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: terraform-linters/setup-tflint@v4
+      - uses: actions/checkout@v7
+      - uses: terraform-linters/setup-tflint@v6
         name: Setup TFLint
-        with:
-          tflint_version: v0.44.1
       - name: Show version
         run: tflint --version
       - name: Init TFLint
@@ -119,9 +117,9 @@ jobs:
     needs: [changes]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: trivy
-        uses: aquasecurity/trivy-action@v0.35.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           scan-type: "config"
           scan-ref: "./terraform"

From 5725d853f47a602bdda4285678b17e4d63a5cbff Mon Sep 17 00:00:00 2001
From: Eric Greer <eric@apsis.io>
Date: Wed, 5 Aug 2026 16:16:30 -0400
Subject: [PATCH 2/3] move permissions so that hopefully dependabot can run
 linting

---
 .github/lint_and_test.yaml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/lint_and_test.yaml b/.github/lint_and_test.yaml
index 21af1a5..ced5f71 100644
--- a/.github/lint_and_test.yaml
+++ b/.github/lint_and_test.yaml
@@ -13,12 +13,14 @@ on:
 concurrency:
   group: test-${{ github.ref_name }}
   cancel-in-progress: true
+
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   changes:
     runs-on: ubuntu-latest
-    permissions:
-      pull-requests: read
-      contents: read
     outputs:
       ruby: ${{ steps.filter.outputs.ruby }}
       js: ${{ steps.filter.outputs.js }}

From bd2ad82bd59e9a67f1e4b604147c75ac30218c2f Mon Sep 17 00:00:00 2001
From: Eric Greer <eric@apsis.io>
Date: Wed, 12 Aug 2026 13:39:59 -0400
Subject: [PATCH 3/3] move to workflows so action is run

---
 .github/{ => workflows}/lint_and_test.yaml | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 rename .github/{ => workflows}/lint_and_test.yaml (100%)

diff --git a/.github/lint_and_test.yaml b/.github/workflows/lint_and_test.yaml
similarity index 100%
rename from .github/lint_and_test.yaml
rename to .github/workflows/lint_and_test.yaml