Add github config

.github/dependabot.yml

@@ -0,0 +1,26 @@
+version: 2
+updates:
+  - package-ecosystem: "maven"
+    directory: "/"
+    registries:
+      - hippo-maven2-enterprise
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "npm"
+    directory: "/repository-data/webfiles/src/main/webapp/opw/"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "npm"
+    directory: "/repository-data/webfiles/src/main/webapp/werken-bij/"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+registries:
+  hippo-maven2-enterprise:
+    type: maven-repository
+    url: https://maven.bloomreach.com/repository/maven2-enterprise/
+    username: ${{ secrets.BLOOMREACH_USER }}
+    password: ${{ secrets.BLOOMREACH_PASSWORD }}

.github/workflows/maven.yml

@@ -1,11 +1,3 @@
-# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
-# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven
-
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-
 name: Java CI with Maven
 
 on:
@@ -16,20 +8,20 @@ on:
 
 jobs:
   build:
-
     runs-on: ubuntu-latest
-
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Set up JDK 17
       uses: actions/setup-java@v3
       with:
-        java-version: '17'
-        distribution: 'temurin'
-        cache: maven
+        distribution: temurin
+        java-version: 17
+    - name: Set up Maven settings
+      uses: whelk-io/maven-settings-xml-action@v22
+      with:
+        servers: >
+          [
+            { "id": "bloomreach-maven2-enterprise", "username": "${{ secrets.BLOOMREACH_USER }}", "password": "${{ secrets.BLOOMREACH_PASSWORD }}" }
+          ]
     - name: Build with Maven
-      run: mvn -B verify --file pom.xml
-
-    # Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
-    - name: Maven Dependency Tree Dependency Submission
-      uses: advanced-security/maven-dependency-submission-action@v3
+      run: mvn -B package --file pom.xml

pom.xml

@@ -79,8 +79,8 @@
     <commons-lang3.version>3.14.0</commons-lang3.version>
     <groovy.version>4.0.23</groovy.version>
     <snakeyaml.version>2.2</snakeyaml.version>
-    <hippo.repository.version>15.2.3</hippo.repository.version>
-    <hippo.services.version>16.0.0</hippo.services.version>
+    <hippo.repository.version>16.1.0</hippo.repository.version>
+    <hippo.services.version>16.1.0</hippo.services.version>
     <javax.jcr.version>2.0</javax.jcr.version>
     <junit-jupiter.version>5.10.1</junit-jupiter.version>
     <jackrabbit.version>2.21.19-h4</jackrabbit.version>
@@ -394,16 +394,13 @@
 
   <repositories>
     <repository>
-      <id>bloomreach-maven2</id>
-      <name>Bloomreach Maven 2</name>
-      <url>https://maven.bloomreach.com/repository/maven2</url>
-      <snapshots>
-        <enabled>false</enabled>
-      </snapshots>
       <releases>
         <updatePolicy>never</updatePolicy>
         <checksumPolicy>fail</checksumPolicy>
       </releases>
+      <id>bloomreach-maven2-enterprise</id>
+      <name>Bloomreach Maven 2 Enterprise</name>
+      <url>https://maven.bloomreach.com/repository/maven2-enterprise</url>
     </repository>
   </repositories>