From 264dea989157718bd7893d2a61b1dd72f5e82dc0 Mon Sep 17 00:00:00 2001
From: Imani Manyara <imanimanyara@users.noreply.github.com>
Date: Tue, 13 Oct 2026 11:49:59 -0400
Subject: [PATCH 1/2] Group Dependabot minor and patch updates weekly

Each ecosystem entry now groups minor and patch updates into one pull request, on the org schedule (weekly, Monday 06:00 America/New_York), so a week of bumps costs one CI run instead of one per dependency.
---
 .github/dependabot.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b2f986e..b9f9832 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,6 +8,10 @@ updates:
       time: "06:00"
       timezone: America/New_York
     open-pull-requests-limit: 10
+    groups:
+      gomod-minor-and-patch:
+        patterns: ["*"]
+        update-types: [minor, patch]
 
   - package-ecosystem: github-actions
     directory: "/"
@@ -16,6 +20,10 @@ updates:
       day: monday
       time: "06:00"
       timezone: America/New_York
+    groups:
+      github-actions-minor-and-patch:
+        patterns: ["*"]
+        update-types: [minor, patch]
   - package-ecosystem: docker
     directory: /
     schedule:
@@ -23,3 +31,7 @@ updates:
       day: monday
       time: "06:00"
       timezone: America/New_York
+    groups:
+      docker-minor-and-patch:
+        patterns: ["*"]
+        update-types: [minor, patch]

From 220dc8bf7f46580c1e3158a76a121da7cbfe11aa Mon Sep 17 00:00:00 2001
From: Imani Manyara <imanimanyara@users.noreply.github.com>
Date: Tue, 13 Oct 2026 11:51:27 -0400
Subject: [PATCH 2/2] Move goreleaser-action to v7.3.0

The SHA pin sat on v7.2.3. It now points at the v7.3.0 release commit (a4f02ab), checked against the tag with the GitHub API.
---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6c00ac6..8a12335 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -50,7 +50,7 @@ jobs:
       - name: Extract CHANGELOG section for this tag
         run: ./scripts/extract-changelog.sh "${GITHUB_REF_NAME}" > release_notes.md
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+        uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
         with:
           # Pin the GoReleaser series so the config schema and the tool stay in
           # sync (avoids `latest` deprecating config keys out from under a release).