Skip to content

ci: sync with netresearch/.github templates/go-app - #604

Merged
CybotTM merged 1 commit into
mainfrom
sync/dependabot-cooldown
Jun 2, 2026
Merged

ci: sync with netresearch/.github templates/go-app#604
CybotTM merged 1 commit into
mainfrom
sync/dependabot-cooldown

Conversation

@CybotTM

@CybotTM CybotTM commented Jun 2, 2026

Copy link
Copy Markdown
Member

Auto-opened by sync-template.sh. Brings this repo back into alignment with the canonical go-app template in netresearch/.github.

To keep any diverging files, add their paths to .github/template.yaml's intentional-drift: list before merging — otherwise the next sync run will revert them.

Auto-generated by scripts/sync-template.sh. Any changes you want to keep
must be declared in .github/template.yaml's intentional-drift: list — the
check-template-drift.yml job will otherwise revert them on next sync.

Signed-off-by: Sebastian Mendel <github@sebastianmendel.de>
Copilot AI review requested due to automatic review settings June 2, 2026 14:02
@github-actions

github-actions Bot commented Jun 2, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@github-actions github-actions Bot added the ci label Jun 2, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated approval for maintainer PR

All automated quality gates passed. See SECURITY_CONTROLS.md for compensating controls.

@sonarqubecloud

sonarqubecloud Bot commented Jun 2, 2026

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request adds a cooldown configuration to several package ecosystems in .github/dependabot.yml. However, cooldown is not a valid Dependabot configuration property and will cause validation to fail, stopping all dependency updates. Additionally, because this file is synchronized from an upstream template, any changes should be made in the upstream repository or the file should be added to the intentional-drift list.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

Comment thread .github/dependabot.yml

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Aligns this repository’s Dependabot configuration with the canonical netresearch/.github go-app template by introducing a consistent “cooldown” window across all configured ecosystems.

Changes:

  • Add a 7-day Dependabot cooldown to gomod, github-actions, docker, npm, and devcontainers update configurations.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@codecov

codecov Bot commented Jun 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.94%. Comparing base (44f7b27) to head (43f2b09).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #604   +/-   ##
=======================================
  Coverage   69.94%   69.94%           
=======================================
  Files          34       34           
  Lines        3437     3437           
=======================================
  Hits         2404     2404           
  Misses        873      873           
  Partials      160      160           
Flag Coverage Δ
e2e 58.99% <ø> (ø)
unittests 70.40% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@CybotTM
CybotTM enabled auto-merge June 2, 2026 14:15
@CybotTM
CybotTM merged commit de3b89d into main Jun 2, 2026
29 checks passed
@CybotTM
CybotTM deleted the sync/dependabot-cooldown branch June 2, 2026 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants