From 06a880964b17efb0d5b63030f9372c2de86e834e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Jan 2026 14:38:18 +0000 Subject: [PATCH 1/4] :arrow_up: [ Docker ] (deps): Bump actions/actions-runner Bumps the docker-minor-patch group with 1 update: [actions/actions-runner](https://github.com/actions/runner). Updates `actions/actions-runner` from 2.330.0 to 2.331.0 - [Release notes](https://github.com/actions/runner/releases) - [Changelog](https://github.com/actions/runner/blob/main/releaseNote.md) - [Commits](https://github.com/actions/runner/compare/v2.330.0...v2.331.0) --- updated-dependencies: - dependency-name: actions/actions-runner dependency-version: 2.331.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-minor-patch ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 040c250..b3abb3f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM ghcr.io/actions/actions-runner:2.330.0 +FROM ghcr.io/actions/actions-runner:2.331.0 USER root From 0d0bd6585e19631de36c9be40173f4c8620fceb7 Mon Sep 17 00:00:00 2001 From: Volkan Welp Date: Thu, 22 Jan 2026 12:50:59 +0100 Subject: [PATCH 2/4] =?UTF-8?q?=F0=9F=90=B3=20Update=20Dockerfile=20to=20u?= =?UTF-8?q?se=20--break-system-packages=20for=20aws-sam-cli=20installation?= =?UTF-8?q?=20and=20add=20cron=20schedule=20to=20docker-publish=20workflow?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/docker-publish.yml | 2 ++ Dockerfile | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 365318f..f870ed8 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -3,6 +3,8 @@ name: Publish Docker image on: push: branches: [main] + schedule: + - cron: "0 6 */15 * *" workflow_dispatch: concurrency: diff --git a/Dockerfile b/Dockerfile index b3abb3f..3ad4d2e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -156,7 +156,7 @@ ENV PATH=$NPM_CONFIG_PREFIX/bin:$PATH # Install global npm packages and AWS SAM CLI RUN npm install -g yarn @redocly/cli typescript \ - && pip3 install --no-cache-dir aws-sam-cli + && pip3 install --no-cache-dir --break-system-packages aws-sam-cli # --- FIX PERMISSIONS --- # After root has run npm, change ownership of the cache and global install From 8bc35e9ae95847fe8a18cc283804fc7505f35274 Mon Sep 17 00:00:00 2001 From: Volkan Welp Date: Thu, 22 Jan 2026 12:57:44 +0100 Subject: [PATCH 3/4] =?UTF-8?q?=F0=9F=90=B3=20Update=20Dockerfile=20to=20i?= =?UTF-8?q?nclude=20--ignore-installed=20flag=20for=20blinker=20during=20a?= =?UTF-8?q?ws-sam-cli=20installation?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 3ad4d2e..3e16fdb 100644 --- a/Dockerfile +++ b/Dockerfile @@ -156,7 +156,7 @@ ENV PATH=$NPM_CONFIG_PREFIX/bin:$PATH # Install global npm packages and AWS SAM CLI RUN npm install -g yarn @redocly/cli typescript \ - && pip3 install --no-cache-dir --break-system-packages aws-sam-cli + && pip3 install --no-cache-dir --break-system-packages --ignore-installed blinker aws-sam-cli # --- FIX PERMISSIONS --- # After root has run npm, change ownership of the cache and global install From c9e167ae32d755447cb33c212ca0ef371e29d89e Mon Sep 17 00:00:00 2001 From: Volkan Welp Date: Thu, 22 Jan 2026 13:03:31 +0100 Subject: [PATCH 4/4] =?UTF-8?q?=F0=9F=A4=96=20Add=20Dependabot=20automatio?= =?UTF-8?q?n=20workflow=20for=20PR=20approvals=20and=20auto-merging?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/dependabot.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/dependabot.yml diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml new file mode 100644 index 0000000..2841f9e --- /dev/null +++ b/.github/workflows/dependabot.yml @@ -0,0 +1,31 @@ +--- + name: Dependabot Automate + + on: + workflow_call: + pull_request: + + permissions: + contents: write + pull-requests: write + + jobs: + dependabot: + runs-on: ubuntu-latest + if: github.event.pull_request.user.login == 'dependabot[bot]' + steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@21025c705c08248db411dc16f3619e6b5f9ea21a + with: + github-token: "${{ secrets.GITHUB_TOKEN }}" + - name: Approve a PR + run: gh pr review --approve "$PR_URL" + env: + PR_URL: ${{github.event.pull_request.html_url}} + GH_TOKEN: ${{secrets.GITHUB_TOKEN}} + - name: Enable auto-merge for Dependabot PRs + run: gh pr merge --auto --squash "$PR_URL" + env: + PR_URL: ${{github.event.pull_request.html_url}} + GH_TOKEN: ${{secrets.GITHUB_TOKEN}} \ No newline at end of file