From 22df416d627373a058fc12af49b583a6dd537fa8 Mon Sep 17 00:00:00 2001
From: nicodes <nicozessoules@gmail.com>
Date: Sun, 18 Oct 2026 02:14:14 +0200
Subject: [PATCH] Complete reviewed dependency updates and database review
 policy

---
 .github/dependabot.yml                  | 8 ++++++++
 .github/dependency-policy.json          | 6 +++++-
 .github/workflows/ci.yml                | 2 +-
 .github/workflows/dependency-policy.yml | 2 +-
 4 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e841597..63b4b17 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -33,6 +33,10 @@ updates:
       - '*prisma*'
       - '*drizzle*'
       - '*migrate*'
+      - modernc.org/sqlite
+      - github.com/jackc/pgx/*
+      - github.com/go-sql-driver/mysql
+      - go.mongodb.org/mongo-driver/*
       update-types:
       - minor
       - patch
@@ -68,3 +72,7 @@ updates:
       - '*prisma*'
       - '*drizzle*'
       - '*migrate*'
+      - modernc.org/sqlite
+      - github.com/jackc/pgx/*
+      - github.com/go-sql-driver/mysql
+      - go.mongodb.org/mongo-driver/*
diff --git a/.github/dependency-policy.json b/.github/dependency-policy.json
index 4d4036a..afbe644 100644
--- a/.github/dependency-policy.json
+++ b/.github/dependency-policy.json
@@ -28,6 +28,10 @@
     "@noble/*",
     "*prisma*",
     "*drizzle*",
-    "*migrate*"
+    "*migrate*",
+    "modernc.org/sqlite",
+    "github.com/jackc/pgx/*",
+    "github.com/go-sql-driver/mysql",
+    "go.mongodb.org/mongo-driver/*"
   ]
 }
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eff5ee9..3be965b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Record tested integration identity
         if: github.event_name == 'pull_request'
-        uses: nicodes/tools/integration-identity@ca747e13a51f301f51635c262d883d57d6084ae3 # v0.27.1
+        uses: nicodes/tools/integration-identity@247267492cd455647facafcfcc6eed4c63c49c0e # v0.27.2
         env:
           EXPECTED_HEAD: ${{ github.event.pull_request.head.sha }}
       - name: Upload artifacts
diff --git a/.github/workflows/dependency-policy.yml b/.github/workflows/dependency-policy.yml
index 1edbe67..e6ab525 100644
--- a/.github/workflows/dependency-policy.yml
+++ b/.github/workflows/dependency-policy.yml
@@ -20,6 +20,6 @@ concurrency:
 jobs:
   auto-merge:
     name: Apply dependency policy
-    uses: nicodes/tools/.github/workflows/dependency-merge.yml@ca747e13a51f301f51635c262d883d57d6084ae3 # v0.27.1
+    uses: nicodes/tools/.github/workflows/dependency-merge.yml@247267492cd455647facafcfcc6eed4c63c49c0e # v0.27.2
     with:
       runner: blacksmith-2vcpu-ubuntu-2404