From 10dc8082cb5d49eb6a581374ca16d793589ddd52 Mon Sep 17 00:00:00 2001
From: matthew-pilot <matthew-pilot@users.noreply.github.com>
Date: Tue, 2 Jun 2026 18:46:09 +0000
Subject: [PATCH 1/2] fix: add Dependabot config for Go modules and GitHub
 Actions (PILOT-355)

Enables automated dependency updates for gomod and github-actions
ecosystems on a weekly schedule, with a 5-PR limit per ecosystem.

Note: notify-canary.yml workflow is in paths_denied (.github/workflows/**)
and will require a human to create manually. See ticket for template.
---
 .github/dependabot.yml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..f78906c
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - go
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - ci

From 92a3a30a235efbdd67d0233cb533718c409efb4d Mon Sep 17 00:00:00 2001
From: matthew-pilot <matthew-pilot@users.noreply.github.com>
Date: Tue, 16 Jun 2026 13:13:53 +0000
Subject: [PATCH 2/2] feat(updater): add RunOnce method for one-shot update
 checks (PILOT-396)

Exposes the existing internal checkOnce() as a public RunOnce() so
CLI tools like pilotctl update can trigger a single update check
without starting a periodic loop.

Closes PILOT-396
---
 updater.go | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/updater.go b/updater.go
index f8dea06..87df9c2 100644
--- a/updater.go
+++ b/updater.go
@@ -102,6 +102,16 @@ func (u *Updater) Stop() {
 	u.wg.Wait()
 }
 
+// RunOnce runs the update check once synchronously and returns. Unlike
+// Start, it does not enter a periodic loop — it performs a single check
+// (checking the pinned version or latest release), applies the update if
+// available, and returns. Useful for one-shot invocations from
+// `pilotctl update` and similar CLI commands.
+func (u *Updater) RunOnce() {
+	u.recoverPendingRestart()
+	u.checkOnce()
+}
+
 func (u *Updater) checkLoop() {
 	defer u.wg.Done()