Update actions

Author: adamw

.github/workflows/ci.yml

@@ -5,6 +5,9 @@ on:
   push:
     branches: ['**']
     tags: [v*]
+permissions:
+  contents: write        # release-drafter, auto-merge requirement
+  pull-requests: write   # labeler, auto-merge requirement        
 jobs:
   ci:
     # run on 1) push, 2) external PRs, 3) softwaremill-ci PRs
@@ -23,7 +26,7 @@ jobs:
         distribution: 'temurin'
         cache: 'sbt'
         java-version: 21
-    - uses: sbt/setup-sbt@v1        
+    - uses: sbt/setup-sbt@3e125ece5c3e5248e18da9ed8d2cce3d335ec8dd # v1, specifically v1.1.14
     - name: Compile
       run: sbt -v compile
     - name: Test

.github/workflows/scala-steward.yml

@@ -6,23 +6,14 @@ on:
     - cron: '0 0 * * *'
   workflow_dispatch:
 
+permissions:
+  contents: write        # Required to checkout and push changes
+  pull-requests: write   # Required to create PRs for dependency updates
+
 jobs:
   scala-steward:
-    runs-on: ubuntu-22.04
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-      - name: Set up JDK 11
-        uses: actions/setup-java@v3
-        with:
-          distribution: 'temurin'
-          java-version: 11
-          cache: 'sbt'
-      - name: Launch Scala Steward
-        uses: scala-steward-org/scala-steward-action@v2
-        with:
-          author-name: scala-steward
-          author-email: scala-steward
-          github-token: ${{ secrets.REPO_GITHUB_TOKEN }}
-          repo-config: .scala-steward.conf
-          ignore-opts-files: false
+    uses: softwaremill/github-actions-workflows/.github/workflows/scala-steward.yml@main
+    secrets:
+      github-token: ${{ secrets.SOFTWAREMILL_CI_PR_TOKEN }}
+    with:
+      java-version: '21'

.gitignore

@@ -23,3 +23,4 @@ project/plugins/project/
 .bloop/
 metals.sbt
 .vscode
+.cursor