chore(ci-governance): synchronize Go profile (#107)

* chore(ci-governance): synchronize Go profile

Governance-Provenance: hmac-sha256:7651f0bf674c1f8516663bed19406776133975b8b69d733f43a0f7f07adcd743

* chore(ci-governance): synchronize Go profile

Governance-Provenance: hmac-sha256:906229b0ed1d2b82bdf8efbd353e7199498cd628ccb10cd598ad2c181694b5ad

* chore(ci-governance): synchronize Go profile

Governance-Provenance: hmac-sha256:b9eb78d56203a2f60eaf11a3066f67bfaaecb777f9fd02881251ba223f2affd1

* chore(ci-governance): synchronize Go profile

Governance-Provenance: hmac-sha256:0591be850d710755ee085a88b96cf68d510a84987de3170a7b8a460551b965cd

* chore(ci-governance): synchronize Go profile

Governance-Provenance: hmac-sha256:8f28664554142d7f65e37656b845a9ccdfa6ba996f8e646fd45bb1a6799fbea6

---------

Co-authored-by: inditextechci-sync[bot] <312492039+inditextechci-sync[bot]@users.noreply.github.com>

Author: inditextechci-sync[bot]

.github/dependabot.yml

@@ -1,29 +1,76 @@
+# SPDX-FileCopyrightText: INDUSTRIA DE DISEÑO TEXTIL S.A. (INDITEX S.A.)
+# SPDX-License-Identifier: Apache-2.0
+
+# Managed by InditexTech CI governance - do not edit by hand.
+# Reconciliation overwrites local edits; record this path in
+# .sync-exclude to take ownership of the file.
 version: 2
+
 updates:
   - package-ecosystem: gomod
-    directory: /
+    directories:
+      - '/'
+    exclude-paths:
+      - 'docs'
+      - 'example'
+      - 'e2e'
+      - 'archetype-resources'
+      - 'src/test/projects'
     schedule:
       interval: weekly
-    commit-message:
-      prefix: chore(deps)
-
+      day: monday
+      time: '04:00'
+      timezone: UTC
+    cooldown:
+      default-days: 3
+      semver-minor-days: 7
+      semver-patch-days: 3
+      semver-major-days: 30
+    open-pull-requests-limit: 5
+    groups:
+      minor-and-patch:
+        update-types:
+          - minor
+          - patch
+      major:
+        update-types:
+          - major
+      codeql-action:
+        patterns:
+          - 'github/codeql-action/*'
   - package-ecosystem: github-actions
-    directory: /
-    schedule:
-      interval: weekly
-    commit-message:
-      prefix: chore(deps)
-
-  - package-ecosystem: docker
-    directory: /
-    schedule:
-      interval: weekly
-    commit-message:
-      prefix: chore(deps)
-
-  - package-ecosystem: docker
-    directory: /hack/tilt
+    directories:
+      - '/'
+    exclude-paths:
+      - 'docs'
+      - 'example'
+      - 'e2e'
+      - 'archetype-resources'
+      - 'src/test/projects'
     schedule:
       interval: weekly
-    commit-message:
-      prefix: chore(deps)
+      day: monday
+      time: '04:00'
+      timezone: UTC
+    cooldown:
+      default-days: 3
+    open-pull-requests-limit: 5
+    groups:
+      codeql-action:
+        patterns:
+          - 'github/codeql-action/*'
+    ignore:
+      - dependency-name: 'InditexTech/gh-actions/*'
+      - dependency-name: 'SonarSource/sonarqube-scan-action'
+      - dependency-name: 'actions/checkout'
+      - dependency-name: 'actions/download-artifact'
+      - dependency-name: 'actions/upload-artifact'
+      - dependency-name: 'asdf-vm/actions/install'
+      - dependency-name: 'fsfe/reuse-action'
+      - dependency-name: 'github/codeql-action/analyze'
+      - dependency-name: 'github/codeql-action/init'
+      - dependency-name: 'github/codeql-action/upload-sarif'
+      - dependency-name: 'newrelic/repolinter-action'
+      - dependency-name: 'ossf/scorecard-action'
+      - dependency-name: 'reviewdog/action-actionlint'
+      - dependency-name: 'webiny/action-conventional-commits'

.github/inditextech-ci-sync-manifest.json

@@ -12,7 +12,7 @@
   "creation_year": 2026,
   "integrity": {
     "algorithm": "hmac-sha256",
-    "signature": "35238a1879c3c8acc3d16b5d08af75a17d6814ad0550258924994c155e176b69"
+    "signature": "5fdc3e391ae4b6916433921195694e9547b370c32454e278ba562f600e865b95"
   },
   "managed_by": "InditexTech CI governance",
   "managed_paths": {
@@ -21,6 +21,7 @@
     ".github/ISSUE_TEMPLATE/3-other.yml": "5a839b39a98704036210dee498146f51bd5a6c057228685680e02004ff063a9a",
     ".github/ISSUE_TEMPLATE/config.yml": "10e5dee4d49aa9e7792ceb4c986160c61f95da1ba00a64bf06e5f1f636cd17ec",
     ".github/PULL_REQUEST_TEMPLATE.md": "23a0b0ac79a9020ccac9c013582a01f86e2df2ae7f914673583b9a3368313041",
+    ".github/dependabot.yml": "d817f5ca1a6b99ff4e5a25a4755d215f834d6fb75325df12ab99774e0e7b9450",
     ".github/inditextech-ci-go.json": "d854041fe302eab86b99a4ee25414027fda743af14f26db7e8883ab90f60c5fd",
     ".github/workflows/code-gomod_go-PR_verify.yml": "d148e5af0bc577e6deff1c6c57916de83af3e553fbe197d057ac2e7c6d7e22cb",
     ".github/workflows/code-gomod_go-sonarcloud-analysis.yml": "fcb5c72a4ae59a3b429420b1e15eda5c4c0cb4a0aa89c3f4f99eb2e3198dcaca",