maintenance for CI files (#42)

* update action versions

* don't explicitly upgrade setuptools and wheel

* add dependabot configuration

* only run the upstream-dev CI on schedule or when requested

Author: keewis

.github/dependabot.yml

@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      # Check for updates once a week
+      interval: 'weekly'

.github/workflows/ci.yaml

@@ -34,7 +34,7 @@ jobs:
             pip-py${{ matrix.python-version }}
 
       - name: upgrade pip
-        run: python -m pip install --upgrade pip setuptools wheel
+        run: python -m pip install --upgrade pip
 
       - name: install sphinx
         run: |

.github/workflows/linting.yaml

@@ -22,4 +22,4 @@ jobs:
         key: pip-py3.8
         restore-keys: |
           pip-
-    - uses: pre-commit/[email protected].0
+    - uses: pre-commit/[email protected].3

.github/workflows/nightly.yaml

@@ -9,9 +9,34 @@ on:
     - cron: '0 0 * * *'
 
 jobs:
+  detect-ci-trigger:
+    name: detect upstream-dev ci trigger
+    runs-on: ubuntu-latest
+    if: |
+      github.repository == 'xarray-contrib/sphinx-autosummary-accessors'
+      && (github.event_name == 'push' || github.event_name == 'pull_request')
+    outputs:
+      triggered: ${{ steps.detect-trigger.outputs.trigger-found }}
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 2
+      - uses: xarray-contrib/[email protected]
+        id: detect-trigger
+        with:
+          keyword: "[test-upstream]"
+
   upstream-dev:
     name: upstream-dev
     runs-on: ubuntu-latest
+    needs: detect-ci-trigger
+
+    if: |
+      always()
+      && (
+        github.event_name == 'schedule'
+        || needs.detect-ci-trigger.outputs.triggered == 'true'
+      )
 
     strategy:
       fail-fast: false

.github/workflows/pre-commit.yaml

@@ -30,7 +30,7 @@ jobs:
       - name: version info
         run: python -m pip list
       - name: autoupdate
-        uses: technote-space/create-pr-action@837dbe469b39f08d416889369a52e2a993625c84
+        uses: technote-space/create-pr-action@bfd4392c80dbeb54e0bacbcf4750540aecae6ed4
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           EXECUTE_COMMANDS: |

.github/workflows/publish.yaml

@@ -24,7 +24,7 @@ jobs:
         run: |
           twine check dist/*
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@54b39fb9371c0b3a6f9f14bb8a67394defc7a806
+        uses: pypa/gh-action-pypi-publish@27b31702a0e7fc50959f5ad993c78deac1bdfc29
         with:
           user: __token__
           password: ${{ secrets.pypi_token }}