From 0a4a2ba3e16b6ba1a17e9b34dd988180a201ea0f Mon Sep 17 00:00:00 2001
From: Hank Pilot <teodor+hank@vulturelabs.io>
Date: Tue, 2 Jun 2026 18:21:17 +0000
Subject: [PATCH] rendezvous: add notify-canary.yml and dependabot.yml

- notify-canary.yml dispatches to pilot-canary on push-to-main
  (canary-build event_type, REPO=rendezvous)
- dependabot.yml tracks Go module + GitHub Actions dependencies
  weekly with standard labels

Part of PILOT-162: Multi-component canary CI wiring.
---
 .github/dependabot.yml              | 19 +++++++++++++++++++
 .github/workflows/notify-canary.yml | 23 +++++++++++++++++++++++
 2 files changed, 42 insertions(+)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/notify-canary.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..f78906c
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - go
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - ci
diff --git a/.github/workflows/notify-canary.yml b/.github/workflows/notify-canary.yml
new file mode 100644
index 0000000..aa4423a
--- /dev/null
+++ b/.github/workflows/notify-canary.yml
@@ -0,0 +1,23 @@
+name: Notify Canary
+
+on:
+  push:
+    branches: [main]
+  workflow_run:
+    workflows: [CI]
+    types: [completed]
+
+jobs:
+  notify:
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.repos.createDispatchEvent({
+              owner: 'pilot-protocol',
+              repo: 'pilot-canary',
+              event_type: 'canary-build',
+              client_payload: { repo: 'rendezvous', ref: context.sha }
+            });