From c8f32518d28ef711d9c3b70d1a5d72161874314c Mon Sep 17 00:00:00 2001 From: MitaliBhalla Date: Mon, 27 Jul 2026 11:08:35 +0530 Subject: [PATCH 1/3] chore: add Dependabot cooldown (~3 days) for supply-chain delay Align Path B version updates with MintMaker minimumReleaseAge so routine bumps wait before Dependabot opens PRs. Co-authored-by: Cursor --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 37e29a0f..cf0b665f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,9 @@ updates: - "ok-to-test" schedule: interval: "weekly" + # Align with MintMaker minimumReleaseAge (~3 days) for supply-chain delay + cooldown: + default-days: 3 # Enable auto-merge for patch and minor updates open-pull-requests-limit: 10 ignore: @@ -21,6 +24,9 @@ updates: - "ok-to-test" schedule: interval: "weekly" + # Align with MintMaker minimumReleaseAge (~3 days) for supply-chain delay + cooldown: + default-days: 3 # Enable auto-merge for patch and minor updates open-pull-requests-limit: 10 # Group related updates together to reduce PR volume From 4bd416e51e326fc246257f76ef67b5e46c4ea8b2 Mon Sep 17 00:00:00 2001 From: MitaliBhalla Date: Mon, 27 Jul 2026 12:52:44 +0530 Subject: [PATCH 2/3] fix: raise golangci-lint timeout to 10m CI lint fails with "0 issues" then a 5m timeout under prow load. Bump the Makefile and .golangci.yml timeouts so the job can finish. Co-authored-by: Cursor --- .golangci.yml | 1 + Makefile | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.golangci.yml b/.golangci.yml index ba43aca4..c71312d4 100644 --- a/.golangci.yml +++ b/.golangci.yml @@ -1,6 +1,7 @@ version: "2" run: modules-download-mode: readonly + timeout: 10m linters: default: none enable: diff --git a/Makefile b/Makefile index 5acc5ec1..0cd4f26d 100644 --- a/Makefile +++ b/Makefile @@ -67,7 +67,7 @@ getlint: curl -sSfL https://golangci-lint.run/install.sh | sh -s -- -b $(GOPATH)/bin $(GOLANGCI_LINT_VERSION) .PHONY: lint lint: getlint - $(GOPATH)/bin/golangci-lint run --timeout 5m + $(GOPATH)/bin/golangci-lint run --timeout 10m ensure-goreleaser: @command -v goreleaser >/dev/null 2>&1 || go install github.com/goreleaser/goreleaser/v2@${GORELEASER_VERSION} From 6f15c1f2a9bb199ab11adf830d033b7bc7f0136f Mon Sep 17 00:00:00 2001 From: MitaliBhalla Date: Mon, 27 Jul 2026 13:55:58 +0530 Subject: [PATCH 3/3] fix: make CI lint more reliable under prow resource limits Warm the module cache before golangci-lint, raise the timeout to 15m, and cap concurrency so package loading finishes on the low-CPU lint pod. Co-authored-by: Cursor --- .golangci.yml | 3 ++- Makefile | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.golangci.yml b/.golangci.yml index c71312d4..da89fb60 100644 --- a/.golangci.yml +++ b/.golangci.yml @@ -1,7 +1,8 @@ version: "2" run: modules-download-mode: readonly - timeout: 10m + timeout: 15m + concurrency: 2 linters: default: none enable: diff --git a/Makefile b/Makefile index 0cd4f26d..20612179 100644 --- a/Makefile +++ b/Makefile @@ -67,7 +67,8 @@ getlint: curl -sSfL https://golangci-lint.run/install.sh | sh -s -- -b $(GOPATH)/bin $(GOLANGCI_LINT_VERSION) .PHONY: lint lint: getlint - $(GOPATH)/bin/golangci-lint run --timeout 10m + GOTOOLCHAIN=$(GO_VERSION) go mod download + $(GOPATH)/bin/golangci-lint run --timeout 15m ensure-goreleaser: @command -v goreleaser >/dev/null 2>&1 || go install github.com/goreleaser/goreleaser/v2@${GORELEASER_VERSION}