build(deps): bump devantler-tech/actions/.github/workflows/template-sync.yaml from 8.0.0 to 9.0.0

[dependabot]

Bumps devantler-tech/actions/.github/workflows/template-sync.yaml from 8.0.0 to 9.0.0.

Release notes

Sourced from devantler-tech/actions/.github/workflows/template-sync.yaml's releases.

v9.0.0

9.0.0 (2026-07-03)

⚠ BREAKING CHANGES

• remove the sync-github-labels composite action (superseded by declarative IssueLabels) (#418)
• All callers referencing old file names, input names, output names, or secret keys must be updated.
• run-dotnet-tests: run-dotnet-tests no longer accepts app-id or app-private-key inputs. Callers pinning by SHA are unaffected; on repin any still-passed values are simply ignored (unexpected-input warning).
• the setup-copilot-skills/update-copilot-skills action paths are removed and setup-agent-skills's agent input is renamed to agents. Consumers on a pinned major (e.g. @​v4) are unaffected until they bump; migration guides are in each action's README.
• the codecov-token input is removed from both actions. Callers must stop passing it (the reusable workflows are updated in lockstep).
• copilot-skills: setup-copilot-skills and update-copilot-skills both remove the skills-lock input; setup-copilot-skills also removes the source input and redefines skills as the sole list input. Delete any skills-lock.json and move each entry onto its own <owner/repo> <skill> line in setup-copilot-skills.with.skills.
• Action directories and input names have been renamed.

Features

• add .NET project and test configurations (#10) (1ce56da)
• add require-checks-in-pr composite action (#113) (1f66c91)
• add auto-merge composite action for PRs (#14) (a8f34bd)
• add automation configuration for PR reviews and issue sessions (f4b7152)
• add blocked label and update label sync configuration (3041247)
• add Calculator class with basic arithmetic operations and corresponding unit tests (f5c21a1)
• add collapsible sections for workflow details in README (2e8d0f9)
• add docs (aba6c52)
• add dotnet-test-action for testing .NET solutions with GitHub Actions (ad39d59)
• add EditorConfig file and update Calculator and CalculatorTests for consistency and clarity (f032439)
• add GitHub workflows (861d3e2)
• add GitOps deployment workflow for managing Kubernetes resources (f6f0ce7)
• add GitOps validation workflow (8505da2)
• add Hadolint action for linting Dockerfiles (9f610a8)
• add Homebrew setup and environment initialization to GitOps workflows (c4b0fe5)
• add Homebrew setup step to GitOps workflows for consistent environment setup (e300bd6)
• add initial release configuration for semantic-release (3c4f906)
• add inputs for HOSTS_FILE and ROOT_CA_CERT_FILE in GitOps workflow (6eefeeb)
• add pull_request and merge_group triggers to Zizmor workflow (1ce3f4b)
• add pull_request trigger to auto-merge and dotnet-test workflows (63097da)
• add pull_request trigger to GitOps lint and test workflows (dbd5fe8)
• add released label to labels configuration (a803193)
• add Repo Assist labels to central config (#161) (b41fbfe)
• add reusable workflow to sync upstream Kyverno policies and update README with usage instructions (b119b9f)
• add schedule trigger for sync labels workflow (5f3527e)
• add shared workflows (0fe78df)
• add step to append hosts file if it exists (6f22cd1)
• add upload-coverage action for GitHub Code Quality (#170) (60d895a)
• add upsert-issue composite action (#55) (e3a0bd5)
• add VERSION_ARGS input to dotnet-embed-binaries workflow for version retrieval (a648561)
• add workflow for cleaning up ghcr packages (856fea4)
• add Zizmor composite action workflow (c0b70d3)
• add Zizmor security analysis workflow and action documentation (dbae7c7)
• add Zizmor workflow configuration (6e1f9b5)

... (truncated)

Changelog

Sourced from devantler-tech/actions/.github/workflows/template-sync.yaml's changelog.

Changelog

9.0.0 (2026-07-03)

⚠ BREAKING CHANGES

• remove the sync-github-labels composite action (superseded by declarative IssueLabels) (#418)
• All callers referencing old file names, input names, output names, or secret keys must be updated.
• run-dotnet-tests: run-dotnet-tests no longer accepts app-id or app-private-key inputs. Callers pinning by SHA are unaffected; on repin any still-passed values are simply ignored (unexpected-input warning).
• the setup-copilot-skills/update-copilot-skills action paths are removed and setup-agent-skills's agent input is renamed to agents. Consumers on a pinned major (e.g. @​v4) are unaffected until they bump; migration guides are in each action's README.
• the codecov-token input is removed from both actions. Callers must stop passing it (the reusable workflows are updated in lockstep).
• copilot-skills: setup-copilot-skills and update-copilot-skills both remove the skills-lock input; setup-copilot-skills also removes the source input and redefines skills as the sole list input. Delete any skills-lock.json and move each entry onto its own <owner/repo> <skill> line in setup-copilot-skills.with.skills.
• Action directories and input names have been renamed.

Features

• add .NET project and test configurations (#10) (1ce56da)
• add require-checks-in-pr composite action (#113) (1f66c91)
• add auto-merge composite action for PRs (#14) (a8f34bd)
• add automation configuration for PR reviews and issue sessions (f4b7152)
• add blocked label and update label sync configuration (3041247)
• add Calculator class with basic arithmetic operations and corresponding unit tests (f5c21a1)
• add collapsible sections for workflow details in README (2e8d0f9)
• add docs (aba6c52)
• add dotnet-test-action for testing .NET solutions with GitHub Actions (ad39d59)
• add EditorConfig file and update Calculator and CalculatorTests for consistency and clarity (f032439)
• add GitHub workflows (861d3e2)
• add GitOps deployment workflow for managing Kubernetes resources (f6f0ce7)
• add GitOps validation workflow (8505da2)
• add Hadolint action for linting Dockerfiles (9f610a8)
• add Homebrew setup and environment initialization to GitOps workflows (c4b0fe5)
• add Homebrew setup step to GitOps workflows for consistent environment setup (e300bd6)
• add initial release configuration for semantic-release (3c4f906)
• add inputs for HOSTS_FILE and ROOT_CA_CERT_FILE in GitOps workflow (6eefeeb)
• add pull_request and merge_group triggers to Zizmor workflow (1ce3f4b)
• add pull_request trigger to auto-merge and dotnet-test workflows (63097da)
• add pull_request trigger to GitOps lint and test workflows (dbd5fe8)
• add released label to labels configuration (a803193)
• add Repo Assist labels to central config (#161) (b41fbfe)
• add reusable workflow to sync upstream Kyverno policies and update README with usage instructions (b119b9f)
• add schedule trigger for sync labels workflow (5f3527e)
• add shared workflows (0fe78df)
• add step to append hosts file if it exists (6f22cd1)
• add upload-coverage action for GitHub Code Quality (#170) (60d895a)
• add upsert-issue composite action (#55) (e3a0bd5)
• add VERSION_ARGS input to dotnet-embed-binaries workflow for version retrieval (a648561)
• add workflow for cleaning up ghcr packages (856fea4)
• add Zizmor composite action workflow (c0b70d3)
• add Zizmor security analysis workflow and action documentation (dbae7c7)

... (truncated)

Commits

• 5aa2657 chore(main): release 9.0.0 (#442)
• d817fa2 chore(main): release 8.0.2 (#441)
• 6f07366 fix(scan-for-todo-comments): restore self-checkout for post-cleanup (#437)
• bd78711 chore(main): release 8.0.1 (#436)
• 96b8f82 fix: resolve first-party self-references at the same commit (#427)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Warning

Review limit reached

@dependabot[bot], you've reached your PR review limit, so we couldn't start this review.

Next review available in: 19 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3d80b7af-3ec5-48f9-b694-1fde836ac2dd

📥 Commits

Reviewing files that changed from the base of the PR and between 96d701f and 58194a7.

📒 Files selected for processing (1)

• .github/workflows/template-sync.yaml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/github_actions/devantler-tech/actions/dot-github/workflows/template-sync.yaml-9.0.0

---

_{Comment @coderabbitai help to get the list of available commands.}