From 5737e6dac83ab87fad06cd1b0d0cf4b3d231bab2 Mon Sep 17 00:00:00 2001
From: shaynafinocchiaro <shayna_finocchiaro@dell.com>
Date: Mon, 3 Feb 2025 10:06:37 -0500
Subject: [PATCH] Add GitHub Actions for dependency updates (#407)

* add actions

* update comment

* fix linting

* fix linting
---
 .github/dependabot.yml                        |  5 ++---
 .../update-libraries-to-commits.yaml          | 18 +++++++++++++++++
 .github/workflows/update-libraries.yaml       | 20 +++++++++++++++++++
 3 files changed, 40 insertions(+), 3 deletions(-)
 create mode 100644 .github/workflows/update-libraries-to-commits.yaml
 create mode 100644 .github/workflows/update-libraries.yaml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 35ab2cc3..dafaa41b 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -13,8 +13,8 @@ updates:
       interval: "daily"
       time: "18:00"
     allow:
-      # Allow both direct and indirect updates for all packages
-      - dependency-type: all
+      # Allow direct updates for packages
+      - dependency-type: direct
     # a group of dependencies will be updated together in one pull request
     groups:
       golang:
@@ -22,7 +22,6 @@ updates:
         update-types:
           - major
           - minor
-          - patch
         patterns:
           - "*"
 
diff --git a/.github/workflows/update-libraries-to-commits.yaml b/.github/workflows/update-libraries-to-commits.yaml
new file mode 100644
index 00000000..c545ce2c
--- /dev/null
+++ b/.github/workflows/update-libraries-to-commits.yaml
@@ -0,0 +1,18 @@
+# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#  http://www.apache.org/licenses/LICENSE-2.0
+
+# Reusable workflow to perform updates of Dell client libraries to latest commits
+name: Dell Libraries Commit Update
+on:  # yamllint disable-line rule:truthy
+  workflow_dispatch:
+
+jobs:
+  package-update:
+    uses: dell/common-github-actions/.github/workflows/update-libraries-to-commits.yml@main
+    name: Dell Libraries Update
+    secrets: inherit
diff --git a/.github/workflows/update-libraries.yaml b/.github/workflows/update-libraries.yaml
new file mode 100644
index 00000000..20f871d5
--- /dev/null
+++ b/.github/workflows/update-libraries.yaml
@@ -0,0 +1,20 @@
+# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#  http://www.apache.org/licenses/LICENSE-2.0
+
+# Reusable workflow to perform updates of Dell client libraries
+name: Dell Libraries Release Update
+on:  # yamllint disable-line rule:truthy
+  workflow_dispatch:
+  repository_dispatch:
+    types: [latest-released-libraries]
+
+jobs:
+  package-update:
+    uses: dell/common-github-actions/.github/workflows/update-libraries.yml@main
+    name: Dell Libraries Update
+    secrets: inherit