Sync repo templates ⚙

Sync with coreos/repo-templates@ad6cb1b.

Author: coreosbot

.github/ISSUE_TEMPLATE/release-checklist.md

@@ -1,5 +1,10 @@
 ---
-# Template generated by https://github.com/coreos/repo-templates; do not edit downstream
+name: release checklist
+about: release checklist template
+title: New release for ssh-key-dir
+labels: jira,kind/release
+warning: |
+    ⚠️ Template generated by https://github.com/coreos/repo-templates; do not edit downstream
 ---
 
 # Release process
@@ -94,22 +99,14 @@ Push access to the upstream repository is required in order to publish the new t
   - [ ] `git branch -d pre-release-${RELEASE_VER} release-${RELEASE_VER}`
 
 - Fedora packaging:
-  - [ ] update the `rust-ssh-key-dir` spec file in [Fedora](https://src.fedoraproject.org/rpms/rust-ssh-key-dir)
-    - bump the `Version`
-    - switch the `Release` back to `1%{?dist}`
-    - remove any patches obsoleted by the new release
-    - update changelog
-  - [ ] run `spectool -g -S rust-ssh-key-dir.spec`
-  - [ ] run `kinit your_fas_account@FEDORAPROJECT.ORG`
-  - [ ] run `fedpkg new-sources $(spectool -S rust-ssh-key-dir.spec | sed 's:.*/::')`
-  - [ ] PR the changes in [Fedora](https://src.fedoraproject.org/rpms/rust-ssh-key-dir)
-  - [ ] once the PR merges to rawhide, merge rawhide into the other relevant branches (e.g. f41) then push those, for example:
+  - [ ] Review the proposed changes in the PR submitted by Packit in [Fedora](https://src.fedoraproject.org/rpms/rust-ssh-key-dir/pull-requests).
+  - [ ] once the PR merges to rawhide, merge rawhide into the other relevant branches (e.g. f43) then push those, for example:
     ```bash
     git checkout rawhide
     git pull --ff-only
-    git checkout f41
+    git checkout f43
     git merge --ff-only rawhide
-    git push origin f41
+    git push origin f43
     ```
   - [ ] on each of those branches run `fedpkg build`
   - [ ] once the builds have finished, submit them to [bodhi](https://bodhi.fedoraproject.org/updates/new), filling in:
@@ -125,6 +122,9 @@ Push access to the upstream repository is required in order to publish the new t
 CentOS Stream 9 packaging:
   - [ ] Create a `rebase-c9s-ssh-key-dir` issue in the internal team-operations repo and follow the steps there
 
+CentOS Stream 10 packaging:
+  - [ ] Create a `rebase-c10s-ssh-key-dir` issue in the internal team-operations repo and follow the steps there
+
 [cargo-release]: https://github.com/sunng87/cargo-release
 [rustup]: https://rustup.rs/
 [crates-io]: https://crates.io/

.github/dependabot.yml

@@ -17,3 +17,11 @@ updates:
     labels:
       - dependency
       - skip-notes
+
+    # Group all updates together in a single PR. We can remove some
+    # updates from a combined update PR via comments to dependabot:
+    # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates#managing-dependabot-pull-requests-for-grouped-updates-with-comment-commands
+    groups:
+      build:
+        patterns:
+          - "*"

.github/workflows/rust.yml

@@ -18,15 +18,16 @@ concurrency:
 env:
   CARGO_TERM_COLOR: always
   # Pinned toolchain for linting
-  ACTIONS_LINTS_TOOLCHAIN: 1.75.0
+  ACTIONS_LINTS_TOOLCHAIN: 1.90.0
 
 jobs:
   tests-stable:
     name: Tests, stable toolchain
     runs-on: ubuntu-latest
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Install toolchain
         uses: dtolnay/rust-toolchain@v1
         with:
@@ -40,9 +41,10 @@ jobs:
   tests-release-stable:
     name: Tests (release), stable toolchain
     runs-on: ubuntu-latest
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Install toolchain
         uses: dtolnay/rust-toolchain@v1
         with:
@@ -56,9 +58,10 @@ jobs:
   tests-release-msrv:
     name: Tests (release), minimum supported toolchain
     runs-on: ubuntu-latest
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Detect crate MSRV
         run: |
           msrv=$(cargo metadata --format-version 1 --no-deps | \
@@ -78,9 +81,10 @@ jobs:
   linting:
     name: Lints, pinned toolchain
     runs-on: ubuntu-latest
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Install toolchain
         uses: dtolnay/rust-toolchain@v1
         with:
@@ -95,13 +99,14 @@ jobs:
   tests-other-channels:
     name: Tests, unstable toolchain
     runs-on: ubuntu-latest
+    container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     continue-on-error: true
     strategy:
       matrix:
         channel: [beta, nightly]
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Install toolchain
         uses: dtolnay/rust-toolchain@v1
         with: