Fix pipline and some CI improvments (#108)

* bump placeholderapi 2.11.5

* pin github actions versions and use only one workflow

* add dependabot

* add Upload artifact for all runs

* add pull_request also to the trigger

Author: T0biii

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"

.github/workflows/default.yml

@@ -1,6 +1,8 @@
 name: Build SmoothTimber
 
-on: [push]
+on: 
+  push:
+  pull_request:
 
 jobs:
   compile:
@@ -10,9 +12,9 @@ jobs:
         java: [ 21 ]
     name: Java ${{ matrix.java }} compile
     steps:
-      - uses: actions/checkout@master
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
       - name: Setup java
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 #v5.0.0
         with:
           distribution: 'adopt'
           java-version: ${{ matrix.java }}
@@ -22,22 +24,22 @@ jobs:
     needs: compile
     name: Build Maven project
     steps:
-    - uses: actions/checkout@v2
-    - uses: actions/cache@v2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
+    - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 #v4.3.0
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Set up JDK 21
-      uses: actions/setup-java@v2
+      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 #v5.0.0
       with:
         distribution: 'adopt'
         java-version: 21
     - name: Build and test project
       run: mvn clean verify
     - name: Upload Maven build artifact
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4.6.2
       with:
         name: SmoothTimber-Artifact
-        path: target/SmoothTimber-*.jar
+        path: target/smoothtimber-*.jar

.github/workflows/pullrequest.yml

@@ -197,7 +197,7 @@
         <dependency>
             <groupId>me.clip</groupId>
             <artifactId>placeholderapi</artifactId>
-            <version>2.10.9</version>
+            <version>2.11.5</version>
             <scope>provided</scope>
         </dependency>