From 3b1549725468f67c57499c8c5dd74bc8a5923e08 Mon Sep 17 00:00:00 2001
From: Darryl Pogue <darryl@dpogue.ca>
Date: Tue, 22 Oct 2024 21:57:00 -0700
Subject: [PATCH] chore(ci): Fix dependabot code scanning errors (#121)

* chore(ci): Fix dependabot code scanning errors

Dependabot pushes a branch to the repo and opens a pull request. The
pull request workflow runs properly, but the push workflow fails because
dependabot doesn't have access to a read/write GITHUB_TOKEN and doesn't
have access to the repo secrets.

The quick fix is telling CI not to run the push event workflow for
branches that start with `dependabot/`.

* chore(ci): Add Node 22 to CI
---
 .github/workflows/ci.yml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e1136f3..a691fc9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,13 @@
 
 name: Node CI
 
-on: [push, pull_request]
+on:
+  push:
+    branches-ignore:
+      - 'dependabot/*'
+  pull_request:
+    branches:
+      - '*'
 
 jobs:
   test:
@@ -25,7 +31,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        node-version: [16.x, 18.x, 20.x]
+        node-version: [16.x, 18.x, 20.x, 22.x]
         os: [ubuntu-latest, windows-latest, macos-latest]
 
     steps: