Merge branch 'main' into search_relevance_role_updates

Author: RyanL1997

.github/dependabot.yml

@@ -11,6 +11,17 @@ updates:
     labels:
       - "dependabot"
       - "dependencies"
+  - package-ecosystem: "gradle"
+    directory: "/libs/opensaml/"
+    schedule:
+      interval: "weekly"
+    ignore:
+      # For all packages, ignore all major versions to minimize breaking issues
+      - dependency-name: "*"
+        update-types: [ "version-update:semver-major" ]
+    labels:
+      - "dependabot"
+      - "dependencies"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

.github/workflows/add-untriaged.yml

@@ -8,7 +8,7 @@ jobs:
   apply-label:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v8
         with:
           script: |
             github.rest.issues.addLabels({

.github/workflows/auto-release.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Get tag
         id: tag
         uses: dawidd6/action-get-tag@v1
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Download release notes
         run: |
           curl -s -o release-notes.md https://raw.githubusercontent.com/opensearch-project/security/main/release-notes/opensearch-security.release-notes-${{ steps.tag.outputs.tag }}.md

.github/workflows/automatic-merges.yml

@@ -12,7 +12,7 @@ jobs:
   automatic-merge-version-bumps:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - id: find-triggering-pr
         uses: peternied/find-triggering-pr@v1
@@ -29,4 +29,5 @@ jobs:
             opensearch-trigger-bot[bot]
           allowed-files: |
             build.gradle
+            CHANGELOG.md
             .github/workflows/*.yml

.github/workflows/changelog_verifier.yml

@@ -9,7 +9,7 @@ jobs:
     if: github.repository == 'opensearch-project/security'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           ref: ${{ github.event.pull_request.head.sha }}