Keep Go and Actions dependencies current

[robbycochran]

Enables weekly Dependabot pull requests for Go modules and GitHub Actions.

The small open-PR cap keeps update review manageable; no updates are merged automatically.

Validation: git diff --check.

Summary by CodeRabbit

• Chores
  • Added automated weekly checks for updates to Go modules and GitHub Actions.
  • Limited automated update requests to three open requests per ecosystem at a time, helping keep maintenance activity manageable.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 46156aad-8886-4637-9219-19b20334d6db

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 41a939aa-2d70-40f7-9b35-fd85e487c362

📥 Commits

Reviewing files that changed from the base of the PR and between 8c99b4d and 2cb9458.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: Your plan provides up to 12 included reviews per hour; 7 remain after this review.

---

Walkthrough

The pull request adds Dependabot configuration for weekly Go module and GitHub Actions updates. Each ecosystem allows up to three open pull requests.

Changes

Dependabot updates

Layer / File(s)	Summary
Configure update schedules .github/dependabot.yml	Adds weekly update checks for Go modules and GitHub Actions. Each ecosystem is limited to three open pull requests.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 2cb94

This adds weekly Dependabot update checks for Go modules and GitHub Actions with bounded open pull requests and no automatic merging. No current merge-readiness risk remains.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: keeping Go and GitHub Actions dependencies current through Dependabot updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch rc/dependabot-ci-freshness

---

_{Comment @coderabbitai help to get the list of available commands.}

[robbycochran]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.