From a628e2161404448c2b684011d23ea27a2ce85b16 Mon Sep 17 00:00:00 2001 From: Mathieu Benoit Date: Tue, 5 May 2026 21:44:51 -0400 Subject: [PATCH 1/3] build /Dockerfile Signed-off-by: Mathieu Benoit --- .github/dependabot.yml | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index eed0369..952691c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,12 +5,19 @@ updates: schedule: interval: monthly day: sunday - open-pull-requests-limit: 3 + open-pull-requests-limit: 5 rebase-strategy: disabled - package-ecosystem: gomod directory: / schedule: interval: monthly day: sunday - open-pull-requests-limit: 3 + open-pull-requests-limit: 5 + rebase-strategy: disabled + - package-ecosystem: docker + directory: build/ + schedule: + interval: monthly + day: sunday + open-pull-requests-limit: 5 rebase-strategy: disabled From 108def7b941e74282e521cadf5769fe99292b1c6 Mon Sep 17 00:00:00 2001 From: Mathieu Benoit Date: Wed, 6 May 2026 03:19:50 +0000 Subject: [PATCH 2/3] write permissions at the job level, not at the root Signed-off-by: Mathieu Benoit --- .github/workflows/build-verify.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/build-verify.yml b/.github/workflows/build-verify.yml index 95f903d..aa11852 100644 --- a/.github/workflows/build-verify.yml +++ b/.github/workflows/build-verify.yml @@ -14,12 +14,13 @@ on: - '*.md' permissions: contents: read - id-token: write # needed for signing the images with GitHub OIDC Token jobs: build-verify-package: runs-on: ubuntu-latest environment: Build + permissions: + id-token: write # needed for signing the images with GitHub OIDC Token steps: - name: Get current date id: date From 3d8649958f34b07121e725e33b7d3d7a6119bdb2 Mon Sep 17 00:00:00 2001 From: Mathieu Benoit Date: Wed, 6 May 2026 03:26:05 +0000 Subject: [PATCH 3/3] back to 3 concurrent PRs Signed-off-by: Mathieu Benoit --- .github/dependabot.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 952691c..bd7b348 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -5,19 +5,19 @@ updates: schedule: interval: monthly day: sunday - open-pull-requests-limit: 5 + open-pull-requests-limit: 3 rebase-strategy: disabled - package-ecosystem: gomod directory: / schedule: interval: monthly day: sunday - open-pull-requests-limit: 5 + open-pull-requests-limit: 3 rebase-strategy: disabled - package-ecosystem: docker directory: build/ schedule: interval: monthly day: sunday - open-pull-requests-limit: 5 + open-pull-requests-limit: 3 rebase-strategy: disabled