From d78550bc3ed4bb84b63c78f71db41556de2af43b Mon Sep 17 00:00:00 2001
From: James Fantin-Hardesty
 <24646452+jfantinhardesty@users.noreply.github.com>
Date: Tue, 20 Oct 2026 10:46:32 -0600
Subject: [PATCH] Bump go mod and update dependabot groups

---
 .github/dependabot.yml | 19 +++++++++++++++++++
 go.mod                 |  2 +-
 2 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0b623fa4b..3e2e8157e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -18,6 +18,9 @@ updates:
       azure-sdk:
         patterns:
           - github.com/Azure/*
+      golang-x:
+        patterns:
+          - golang.org/x/*
   - package-ecosystem: "github-actions"
     # Workflow files stored in the default location of `.github/workflows`. (You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.)
     directory: "/"
@@ -25,6 +28,22 @@ updates:
       interval: "weekly"
     cooldown:
       default-days: 7
+    groups:
+      codeql-action:
+        patterns:
+          - github/codeql-action*
+      github-actions-core:
+        patterns:
+          - actions/*
+      osv-scanner:
+        patterns:
+          - google/osv-scanner-action*
+      trivy-action:
+        patterns:
+          - aquasecurity/trivy-action
+      setup-zig:
+        patterns:
+          - mlugg/setup-zig
   - package-ecosystem: "pre-commit"
     directory: "/"
     schedule:
diff --git a/go.mod b/go.mod
index b7183359c..41a97dd24 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/Seagate/cloudfuse
 
 go 1.27
 
-toolchain go1.27.1
+toolchain go1.27.3
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.23.3