Configure Dependabot to keep dependencies current.
Scope:
- Enable Go module updates for
go.mod and go.sum.
- Enable GitHub Actions updates for pinned action revisions.
- Ensure Go dependency pull requests regenerate and include
vendor/ (for example, with go mod tidy && go mod vendor).
- Keep CI running with
GOFLAGS=-mod=vendor so inconsistent vendor metadata fails validation.
This is follow-up work to the initial dependency vendoring setup.
Configure Dependabot to keep dependencies current.
Scope:
go.modandgo.sum.vendor/(for example, withgo mod tidy && go mod vendor).GOFLAGS=-mod=vendorso inconsistent vendor metadata fails validation.This is follow-up work to the initial dependency vendoring setup.