Enable dependabot for /deploy and pin Go version to 1.24

Signed-off-by: Radoslav Dimitrov <[email protected]>

Author: rdimitrov

.github/dependabot.yml

@@ -4,6 +4,10 @@ updates:
     directory: /
     schedule:
       interval: daily
+  - package-ecosystem: gomod
+    directory: /deploy
+    schedule:
+      interval: daily
   - package-ecosystem: github-actions
     directory: /
     groups:

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.25-alpine AS builder
+FROM golang:1.24-alpine AS builder
 WORKDIR /app
 
 # Copy go mod files first and download dependencies

deploy/go.mod

@@ -1,6 +1,6 @@
 module github.com/modelcontextprotocol/registry/deploy/infra
 
-go 1.23.0
+go 1.24.0
 
 toolchain go1.24.1
 

go.mod

@@ -1,11 +1,12 @@
 module github.com/modelcontextprotocol/registry
 
-go 1.25
+go 1.24.0
 
 require (
 	github.com/caarlos0/env/v11 v11.3.1
 	github.com/coreos/go-oidc/v3 v3.16.0
 	github.com/danielgtaylor/huma/v2 v2.34.1
+	github.com/distribution/reference v0.6.0
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/jackc/pgx/v5 v5.7.6
 	github.com/prometheus/client_golang v1.23.2
@@ -25,7 +26,6 @@ require (
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/distribution/reference v0.6.0 // indirect
 	github.com/go-jose/go-jose/v4 v4.1.3 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect