build(fix): [#663] Aggregate Dependabot gomod updates

.github/dependabot.yml

@@ -1,21 +1,19 @@
 ---
 version: 2
 updates:
-  - package-ecosystem: 'docker'
-    directory: '/'
-    reviewers:
-      - '030'
+  - package-ecosystem: "docker"
+    directory: "/"
     schedule:
-      interval: 'daily'
-  - package-ecosystem: 'github-actions'
-    directory: '/'
-    reviewers:
-      - '030'
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
     schedule:
-      interval: 'daily'
-  - package-ecosystem: 'gomod'
-    directory: '/'
-    reviewers:
-      - '030'
+      interval: "weekly"
+  - package-ecosystem: "gomod"
+    directory: "/"
     schedule:
-      interval: 'daily'
+      interval: "weekly"
+    groups:
+      gomod-all:
+        patterns:
+          - "*"

.github/workflows/docker.yml

@@ -1,12 +1,20 @@
 ---
 name: Docker
-'on': push
+"on":
+  # required by gomod-go-version-updater to trigger this action once pr has
+  # been reviewed
+  pull_request_review:
+    types: [submitted]
+  push:
+permissions:
+  contents: read
+  packages: write
 jobs:
   mcvs-docker-action:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v4.1.4
-      - uses: schubergphilis/mcvs-docker-action@v0.3.2
+      - uses: actions/checkout@v4.2.2
+      - uses: schubergphilis/mcvs-docker-action@v0.5.6
         with:
           dockle-accept-key: libcrypto3,libssl3
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/golang.yml

@@ -1,17 +1,36 @@
 ---
-name: golang
-'on':
+name: Golang
+"on":
   # required by gomod-go-version-updater to trigger this action once pr has
   # been reviewed
   pull_request_review:
     types: [submitted]
   push:
+permissions:
+  contents: read
+  packages: read
 jobs:
   mcvs-golang-action:
-    runs-on: ubuntu-20.04
+    strategy:
+      matrix:
+        testing-type:
+          - component
+          - coverage
+          - integration
+          - lint
+          - security-golang-modules
+          - security-grype
+          - security-trivy
+          - unit
+    runs-on: ubuntu-22.04
+    env:
+      TASK_X_REMOTE_TASKFILES: 1
     steps:
-      - uses: actions/checkout@v4.1.4
-      - uses: schubergphilis/mcvs-golang-action@v0.4.1
+      - uses: actions/checkout@v4.2.2
+      - uses: schubergphilis/mcvs-golang-action@v0.15.0
         with:
+          code-coverage-expected: 69.5
           golang-unit-tests-exclusions: |-
             \(cmd\/n3dr\|internal\/app\/n3dr\/\(goswagger\|n3drtest\)\)
+          testing-type: ${{ matrix.testing-type }}
+          token: ${{ secrets.GITHUB_TOKEN }}