Add --updater-env flag to graph command

[Copilot]

The graph command didn't accept the --updater-env flag that update already supports for passing environment variables to the updater container.

Changes

• graph.go: Added --updater-env flag registration and wired it through to infra.Run()
• test.go: Wired existing --updater-env flag through to infra.Run() (flag was registered but not forwarded)

Usage is now consistent across commands:

dependabot graph go_modules dependabot/cli -e FOO=bar -e BAZ=qux
dependabot update go_modules dependabot/cli -e FOO=bar -e BAZ=qux
dependabot test -f smoke.yml -e FOO=bar -e BAZ=qux

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• 172.20.0.1
  • Triggering command: REDACTED, pid is -1 (packet block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Have graph command take --updater-env</issue_title>
<issue_description>The update command takes -e, --updater-env stringArray additional environment variables to set in the update container. The graph command doesn't accept that param.

Make it so that it does, and forward those appropriately.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Have graph command take --updater-env #549

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.