From d40e4af6b100ee26a3cd266ab6c418a7690984c9 Mon Sep 17 00:00:00 2001
From: abicky <takeshi.arabiki@gmail.com>
Date: Sun, 16 Aug 2026 16:30:43 +0900
Subject: [PATCH 1/3] Update test matrix

This drops support for versions that have reached end-of-life and adds
support for newer versions.
---
 .github/workflows/test.yml        | 21 +++++----------------
 Gemfile                           |  2 +-
 gemfiles/activerecord_6_1.gemfile |  5 -----
 gemfiles/activerecord_7_0.gemfile |  4 ----
 gemfiles/activerecord_7_1.gemfile |  2 --
 gemfiles/activerecord_7_2.gemfile |  2 --
 6 files changed, 6 insertions(+), 30 deletions(-)
 delete mode 100644 gemfiles/activerecord_6_1.gemfile
 delete mode 100644 gemfiles/activerecord_7_0.gemfile
 delete mode 100644 gemfiles/activerecord_7_1.gemfile
 delete mode 100644 gemfiles/activerecord_7_2.gemfile

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b862225..beca33f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,28 +15,17 @@ jobs:
       fail-fast: false
       matrix:
         ruby-version:
-          - '3.1'
-          - '3.2'
           - '3.3'
           - '3.4'
-          - '3'
+          - '4.0'
+          - 'ruby' # latest stable release
         activerecord-version:
-          - '6_1'
-          - '7_0'
-          - '7_1'
-          - '7_2'
           - '8_0'
           - 'latest'
         mysql-version:
-          - '8.0'
-        exclude:
-          # Exclude conditions that don't meat the minimal requirement
-          - ruby-version: '3.1'
-            activerecord-version: '8_0'
-
-          # Exclude duplicate conditions
-          - ruby-version: '3.1'
-            activerecord-version: 'latest' # equivalent to '7_2'
+          - '8.0' # Aurora MySQL version 3, which is compatible with MySQL 8.0, reaches EOL on April 30, 2028
+          - '8.4'
+          - '9.7'
     services:
       mysql:
         image: mysql:${{ matrix.mysql-version }}
diff --git a/Gemfile b/Gemfile
index a174165..a7e71cb 100644
--- a/Gemfile
+++ b/Gemfile
@@ -4,5 +4,5 @@ source "https://rubygems.org"
 gemspec
 
 gem "mysql2"
-gem "rake", "~> 12.0"
+gem "rake", "~> 13.0"
 gem "rspec", "~> 3.0"
diff --git a/gemfiles/activerecord_6_1.gemfile b/gemfiles/activerecord_6_1.gemfile
deleted file mode 100644
index 45a7048..0000000
--- a/gemfiles/activerecord_6_1.gemfile
+++ /dev/null
@@ -1,5 +0,0 @@
-eval_gemfile("../Gemfile")
-gem "activerecord", "~> 6.1.0"
-gem "base64"
-gem "bigdecimal"
-gem "mutex_m"
diff --git a/gemfiles/activerecord_7_0.gemfile b/gemfiles/activerecord_7_0.gemfile
deleted file mode 100644
index 2d07c82..0000000
--- a/gemfiles/activerecord_7_0.gemfile
+++ /dev/null
@@ -1,4 +0,0 @@
-eval_gemfile("../Gemfile")
-gem "activerecord", "~> 7.0.0"
-gem "mutex_m"
-gem "bigdecimal"
diff --git a/gemfiles/activerecord_7_1.gemfile b/gemfiles/activerecord_7_1.gemfile
deleted file mode 100644
index afdf59b..0000000
--- a/gemfiles/activerecord_7_1.gemfile
+++ /dev/null
@@ -1,2 +0,0 @@
-eval_gemfile("../Gemfile")
-gem "activerecord", "~> 7.1.0"
diff --git a/gemfiles/activerecord_7_2.gemfile b/gemfiles/activerecord_7_2.gemfile
deleted file mode 100644
index 74aab1c..0000000
--- a/gemfiles/activerecord_7_2.gemfile
+++ /dev/null
@@ -1,2 +0,0 @@
-eval_gemfile("../Gemfile")
-gem "activerecord", "~> 7.2.0"

From 44b84bf0e187d1f0bdcb7d7bea924d57bf9a8eb4 Mon Sep 17 00:00:00 2001
From: abicky <takeshi.arabiki@gmail.com>
Date: Sun, 16 Aug 2026 21:36:16 +0900
Subject: [PATCH 2/3] Harden GitHub Actions

---
 .github/workflows/test.yml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index beca33f..c92f5d9 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -6,9 +6,11 @@ on:
   schedule:
     - cron: '0 13 * * *'
 
+permissions:
+  contents: read
+
 jobs:
   build:
-
     runs-on: ubuntu-latest
     timeout-minutes: 10
     strategy:
@@ -44,14 +46,19 @@ jobs:
       BUNDLE_GEMFILE: gemfiles/activerecord_${{ matrix.activerecord-version }}.gemfile
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
       - name: Set up Ruby ${{ matrix.ruby-version }}
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
         with:
           ruby-version: ${{ matrix.ruby-version }}
           bundler-cache: true
+
       - name: Show activerecord version
         run: bundle info activerecord
+
       - name: Run tests
         run: |
           bundle exec rake

From 78875b9b73734c655c1121b232ac501967ff762f Mon Sep 17 00:00:00 2001
From: abicky <takeshi.arabiki@gmail.com>
Date: Sun, 16 Aug 2026 21:52:12 +0900
Subject: [PATCH 3/3] Configure Dependabot

---
 .github/dependabot.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..fba177a
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,18 @@
+version: 2
+
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+      time: "20:00"
+      timezone: Asia/Tokyo
+    cooldown:
+      default-days: 7
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch