From 8048d62634872e937bf37f33028e4b4448a4d7d4 Mon Sep 17 00:00:00 2001
From: Justin Hutchings <jhutchings1@github.com>
Date: Thu, 13 Oct 2022 13:01:48 -0700
Subject: [PATCH 1/3] Add dependency graph

Scala builds do not automatically get support for the dependency graph. This addition will upload dependency information to the dependency graph so users get Dependabot alerts.
---
 ci/scala.yml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/ci/scala.yml b/ci/scala.yml
index 4a3c112..a88374f 100644
--- a/ci/scala.yml
+++ b/ci/scala.yml
@@ -6,17 +6,24 @@ on:
   pull_request:
     branches: [ $default-branch ]
 
+permissions:
+  contents: read
+
 jobs:
   build:
 
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up JDK 11
-      uses: actions/setup-java@v2
+      uses: actions/setup-java@v3
       with:
         java-version: '11'
-        distribution: 'adopt'
+        distribution: 'temurin'
+        cache: 'sbt'
     - name: Run tests
       run: sbt test
+      # This step uploads information to the GitHub dependency graph and unblocking Dependabot alerts for the repository
+    - name: Upload dependency graph
+      uses: scalacenter/sbt-dependency-submission@v2

From 6686f7461a5ea356163d37ef11e325ab03a534bb Mon Sep 17 00:00:00 2001
From: Justin Hutchings <jhutchings1@github.com>
Date: Thu, 13 Oct 2022 13:08:31 -0700
Subject: [PATCH 2/3] Add disclaimer

---
 ci/scala.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ci/scala.yml b/ci/scala.yml
index a88374f..9e78672 100644
--- a/ci/scala.yml
+++ b/ci/scala.yml
@@ -1,3 +1,8 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
 name: Scala CI
 
 on:

From c1444385ea259d1d65245650e32286eb22ea1341 Mon Sep 17 00:00:00 2001
From: Justin Hutchings <jhutchings1@github.com>
Date: Mon, 24 Oct 2022 15:24:40 -0700
Subject: [PATCH 3/3] Mark optional and use commit SHA

---
 ci/scala.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ci/scala.yml b/ci/scala.yml
index 9e78672..14ba966 100644
--- a/ci/scala.yml
+++ b/ci/scala.yml
@@ -29,6 +29,6 @@ jobs:
         cache: 'sbt'
     - name: Run tests
       run: sbt test
-      # This step uploads information to the GitHub dependency graph and unblocking Dependabot alerts for the repository
+      # Optional: This step uploads information to the GitHub dependency graph and unblocking Dependabot alerts for the repository
     - name: Upload dependency graph
-      uses: scalacenter/sbt-dependency-submission@v2
+      uses: scalacenter/sbt-dependency-submission@ab086b50c947c9774b70f39fc7f6e20ca2706c91