Merge branch 'main' into dependabot-github_actions-dependabot-fetch-m…

…etadata-2

.github/workflows/dependabot.yml

@@ -4,7 +4,7 @@ on: pull_request
 jobs:
   dependabot:
     runs-on: ubuntu-latest
-    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    if: startsWith(github.event.pull_request.user.login, 'dependabot')
     env:
       GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
     steps:
@@ -16,7 +16,6 @@ jobs:
         id: metadata
         uses: dependabot/fetch-metadata@v2
       - name: Approve PR
-        if: steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch'
         run: |
           if [ "$(gh pr status --json reviewDecision -q .currentBranch.reviewDecision)" != "APPROVED" ]; then
             gh pr review --approve

.github/workflows/ruby.yml

@@ -28,4 +28,4 @@ jobs:
       - name: run tests
         run: bundle exec rspec
       - name: upload code coverage
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v3

Gemfile.lock

@@ -26,9 +26,9 @@ GEM
     docile (1.4.0)
     drb (2.2.0)
       ruby2_keywords
-    faker (3.2.3)
+    faker (3.3.0)
       i18n (>= 1.8.11, < 2)
-    i18n (1.14.1)
+    i18n (1.14.4)
       concurrent-ruby (~> 1.0)
     minitest (5.22.2)
     mutex_m (0.2.0)