From 79a4e31fe82b4ab12e542e29dcbc4d42fb7a7081 Mon Sep 17 00:00:00 2001
From: Jinzhe Zeng <jinzhe.zeng@rutgers.edu>
Date: Tue, 17 Jan 2023 12:38:39 -0500
Subject: [PATCH 1/2] use dependabot to update github actions

Signed-off-by: Jinzhe Zeng <jinzhe.zeng@rutgers.edu>
---
 .github/dependabot.yml            |  7 +++++++
 .github/workflows/build_cc.yml    |  2 +-
 .github/workflows/build_wheel.yml | 10 ++--------
 .github/workflows/test_cc.yml     |  2 +-
 .github/workflows/test_python.yml |  2 +-
 5 files changed, 12 insertions(+), 11 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..5855aef6c5
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    target-branch: "devel"
diff --git a/.github/workflows/build_cc.yml b/.github/workflows/build_cc.yml
index 82a27932f6..ff3342490f 100644
--- a/.github/workflows/build_cc.yml
+++ b/.github/workflows/build_cc.yml
@@ -23,7 +23,7 @@ jobs:
     steps:
     - name: work around permission issue
       run: git config --global --add safe.directory /__w/deepmd-kit/deepmd-kit
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v3
       with:
         submodules: true
     - run: apt-get update && apt-get install -y nvidia-cuda-toolkit
diff --git a/.github/workflows/build_wheel.yml b/.github/workflows/build_wheel.yml
index be01338b21..669a0219fb 100644
--- a/.github/workflows/build_wheel.yml
+++ b/.github/workflows/build_wheel.yml
@@ -39,14 +39,8 @@ jobs:
       - uses: docker/setup-qemu-action@v2
         name: Setup QEMU
         if: matrix.platform_id == 'manylinux_aarch64'
-      - uses: actions/setup-python@v2
-        name: Install Python
-        with:
-          python-version: '3.8'
-
-      - run: python -m pip install cibuildwheel==2.11.3
       - name: Build wheels
-        run: python -m cibuildwheel --output-dir wheelhouse
+        uses: pypa/cibuildwheel@v2.11.3
         env:
           CIBW_BUILD_VERBOSITY: 1
           CIBW_ARCHS: all
@@ -83,7 +77,7 @@ jobs:
         with:
           name: artifact
           path: dist
-      - uses: pypa/gh-action-pypi-publish@master
+      - uses: pypa/gh-action-pypi-publish@v4
         with:
           user: __token__
           password: ${{ secrets.pypi_password }}
diff --git a/.github/workflows/test_cc.yml b/.github/workflows/test_cc.yml
index 22d4a31a20..b9cd1c84a4 100644
--- a/.github/workflows/test_cc.yml
+++ b/.github/workflows/test_cc.yml
@@ -10,7 +10,7 @@ jobs:
     steps:
     - name: work around permission issue
       run: git config --global --add safe.directory /__w/deepmd-kit/deepmd-kit
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v4
     - run: source/install/test_cc_local.sh
       env:
         OMP_NUM_THREADS: 1
diff --git a/.github/workflows/test_python.yml b/.github/workflows/test_python.yml
index f65b9477fb..c7af45be8b 100644
--- a/.github/workflows/test_python.yml
+++ b/.github/workflows/test_python.yml
@@ -38,7 +38,7 @@ jobs:
     steps:
     - name: work around permission issue
       run: git config --global --add safe.directory /__w/deepmd-kit/deepmd-kit
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v4
     - run: python -m pip install -U pip>=21.3.1
     - run: pip install -e .[cpu,test]
       env:

From 67807648862abaaa557353d265bfa31720b70cfc Mon Sep 17 00:00:00 2001
From: Jinzhe Zeng <jinzhe.zeng@rutgers.edu>
Date: Tue, 17 Jan 2023 13:22:33 -0500
Subject: [PATCH 2/2] no v4

---
 .github/workflows/test_cc.yml     | 2 +-
 .github/workflows/test_python.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/test_cc.yml b/.github/workflows/test_cc.yml
index b9cd1c84a4..a6eb4727f1 100644
--- a/.github/workflows/test_cc.yml
+++ b/.github/workflows/test_cc.yml
@@ -10,7 +10,7 @@ jobs:
     steps:
     - name: work around permission issue
       run: git config --global --add safe.directory /__w/deepmd-kit/deepmd-kit
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v3
     - run: source/install/test_cc_local.sh
       env:
         OMP_NUM_THREADS: 1
diff --git a/.github/workflows/test_python.yml b/.github/workflows/test_python.yml
index c7af45be8b..0d6a948de8 100644
--- a/.github/workflows/test_python.yml
+++ b/.github/workflows/test_python.yml
@@ -38,7 +38,7 @@ jobs:
     steps:
     - name: work around permission issue
       run: git config --global --add safe.directory /__w/deepmd-kit/deepmd-kit
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v3
     - run: python -m pip install -U pip>=21.3.1
     - run: pip install -e .[cpu,test]
       env: