From e19ebfe26f0cdba9f6360fbdf5b368fa79c13643 Mon Sep 17 00:00:00 2001
From: David Benson <davidbenson86@gmail.com>
Date: Wed, 12 Aug 2026 13:54:05 -0400
Subject: [PATCH] adding release creation, dependabot

---
 .github/dependabot.yml              | 11 +++++++++++
 .github/workflows/test-and-tag.yaml |  7 +++++--
 2 files changed, 16 insertions(+), 2 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..332f5c4
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      actions:
+        patterns: ["*"]
+    cooldown:
+      default-days: 7
diff --git a/.github/workflows/test-and-tag.yaml b/.github/workflows/test-and-tag.yaml
index 4035b87..cc8c3b4 100644
--- a/.github/workflows/test-and-tag.yaml
+++ b/.github/workflows/test-and-tag.yaml
@@ -44,6 +44,8 @@ jobs:
             bf06dbe4-5b30-4020-b39e-b18501151ace > DOCKERHUB_ACCESS_TOKEN
 
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Test Action
         uses: ./
         with:
@@ -60,10 +62,11 @@ jobs:
           dockerfile: './test/Dockerfile'
 
       - name: Generate Semantic Version
-        uses: enosix/github-action-generate-semver@4ab2e5251fb8c5b9b06eb65b22c0e25daba76311 # v4.0.1
+        uses: enosix/github-action-generate-semver@0db52174578015a9471b9342427b97dc4e031cf2 # v5.0.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           bump: ${{ env.bump }}
           prerelease_version: ${{ env.prerelease_version }}
           dry_run: ${{ env.dry_run }}
-          detect_bump: true
\ No newline at end of file
+          create_release: ${{ github.event_name == 'push' }}
+          detect_bump: ${{ github.event_name == 'push' }}