From 44634fc457b2f89a9a938f3d7b5bc8e691cabaa1 Mon Sep 17 00:00:00 2001 From: Krish Suchak Date: Thu, 9 Apr 2026 16:44:24 -0400 Subject: [PATCH 1/2] dependabot --- .github/dependabot.yml | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5de7d12c3d..fc46f661cc 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,7 +7,9 @@ version: 2 updates: # Dependabot for CI - package-ecosystem: github-actions - directory: / + directories: + - "/" + - "/otdfctl/e2e" schedule: interval: monthly commit-message: @@ -68,6 +70,17 @@ updates: schedule: interval: daily + - package-ecosystem: gomod + directory: "/otdfctl" + commit-message: + prefix: "fix(deps)" + groups: + external: + exclude-patterns: + - "github.com/opentdf/*" + schedule: + interval: daily + - package-ecosystem: gomod directory: "/protocol/go" commit-message: From b032b83072497efd3655e3452b620375affce751 Mon Sep 17 00:00:00 2001 From: Krish Suchak Date: Thu, 9 Apr 2026 17:09:56 -0400 Subject: [PATCH 2/2] align checkout step versions --- .github/workflows/checks.yaml | 2 +- .github/workflows/release-otdfctl.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml index 7885df9f72..f954daee1f 100644 --- a/.github/workflows/checks.yaml +++ b/.github/workflows/checks.yaml @@ -554,7 +554,7 @@ jobs: name: otdfctl e2e tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/release-otdfctl.yaml b/.github/workflows/release-otdfctl.yaml index 5f86047f74..b66b2f257c 100644 --- a/.github/workflows/release-otdfctl.yaml +++ b/.github/workflows/release-otdfctl.yaml @@ -13,7 +13,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false