dependabot go module support

Author: wcatz

.github/workflows/.github/dependabot.yml

@@ -3,10 +3,10 @@ updates:
   - package-ecosystem: "gomod" # For Go modules
     directory: "/" # Location of go.mod
     schedule:
-      interval: "monthly" # Check for updates weekly (or daily, monthly)
-    open-pull-requests-limit: 10 # Max number of open PRs
+      interval: "monthly" # Check weekly (adjust to daily/monthly as needed)
+    open-pull-requests-limit: 10 # Max concurrent PRs
     commit-message:
       prefix: "deps" # Prefix for commit messages
       include: "scope" # Include scope in commit message
     labels:
-      - "dependencies" # Add label to PRs
+      - "dependencies" # Label for PRs

.github/workflows/docker-build-push.yml

@@ -4,6 +4,9 @@ on:
   push:
     branches:
       - master
+  pull_request:
+    branches:
+      - master # Trigger on PRs to master (e.g., Dependabot PRs)
 
 jobs:
   build-and-push:
@@ -13,7 +16,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3  # For potential multi-arch support
+        uses: docker/setup-qemu-action@v3 # Required for multi-arch builds
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -23,11 +26,12 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
+        if: github.event_name == 'push' # Only login for push events
 
       - name: Build and push Docker image
         uses: docker/build-push-action@v6
         with:
           context: .
-          platforms: linux/amd64,linux/arm64  # Multi-arch
-          push: true
+          platforms: linux/amd64,linux/arm64 # Multi-arch support
+          push: ${{ github.event_name == 'push' }} # Push only on push events
           tags: ${{ secrets.DOCKERHUB_USERNAME }}/goduckbot:latest