From 195b55d92794089b006bb86413e384beecde09fa Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Wed, 10 Dec 2025 18:12:11 +0000
Subject: [PATCH] =?UTF-8?q?Sync=20repo=20templates=20=E2=9A=99?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Sync with coreos/repo-templates@1912d5a62bedda531b02bc8cefd4f20993de509d.
---
 .github/dependabot.yml          | 21 ++++++++++++++++++++-
 .github/workflows/container.yml |  2 +-
 .github/workflows/go.yml        | 22 ++++++++++++++++------
 3 files changed, 37 insertions(+), 8 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 30972fd..ddccfba 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,12 +1,31 @@
 # Maintained in https://github.com/coreos/repo-templates
 # Do not edit downstream.
 
+# Updates are grouped together by ecosystem in a single PR. An update can be
+# removed from a combined update PR via comments to dependabot:
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates#managing-dependabot-pull-requests-for-grouped-updates-with-comment-commands
+
 version: 2
 updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels: ["skip-notes"]
+    open-pull-requests-limit: 3
+    groups:
+      actions:
+        patterns:
+          - "*"
   - package-ecosystem: gomod
     directory: /
     schedule:
-      interval: weekly
+      interval: monthly
     open-pull-requests-limit: 10
     labels:
       - kind/dependency
+
+    groups:
+      build:
+        patterns:
+          - "*"
diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
index 2abf05d..6420c55 100644
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
       - name: Build and push container
         uses: coreos/actions-lib/build-container@main
         with:
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 8f2559e..0c01640 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -20,23 +20,33 @@ jobs:
     name: Test
     strategy:
       matrix:
-        go-version: [1.18.x, 1.19.x, 1.20.x]
+        go-version: [1.24.x, 1.25.x]
     runs-on: ubuntu-latest
     steps:
     - name: Set up Go 1.x
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@v5
       with:
         go-version: ${{ matrix.go-version }}
     - name: Check out repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v5
     - name: Check modules
       run: go mod verify
     - name: Build
       run: go build
     - name: Test
       run: go test -v ./...
+    - name: Check Go formatting (gofmt)
+      shell: bash
+      run: |
+        GO_FILES=$(find . -name '*.go' -not -path "./vendor/*")
+        UNFORMATTED_FILES=$(gofmt -l $GO_FILES)
+        if [ -n "$UNFORMATTED_FILES" ]; then
+          echo "Go files are not formatted. Please run 'gofmt -w .' on your code."
+          gofmt -d $UNFORMATTED_FILES
+          exit 1
+        fi
+        echo "All Go files are correctly formatted."
     - name: Run linter
-      uses: golangci/golangci-lint-action@v3
+      uses: golangci/golangci-lint-action@v8
       with:
-        version: v1.52.2
-        args: -E=gofmt --timeout=30m0s
+        version: v2.6.2