From 3d01b837f3ecd17eb9d466a31fb3265ae318e75d Mon Sep 17 00:00:00 2001
From: cyclone-github <34043806+cyclone-github@users.noreply.github.com>
Date: Fri, 7 Nov 2025 13:26:50 -0600
Subject: [PATCH] ci: build/test Dependabot PRs

---
 .github/workflows/deps-ci.yml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 .github/workflows/deps-ci.yml

diff --git a/.github/workflows/deps-ci.yml b/.github/workflows/deps-ci.yml
new file mode 100644
index 0000000..e742a25
--- /dev/null
+++ b/.github/workflows/deps-ci.yml
@@ -0,0 +1,25 @@
+name: deps-ci
+on:
+  pull_request:
+    branches: [ main, master ]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  go:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: 'go.mod'
+          check-latest: true
+      - run: go mod tidy
+      - run: go build ./...
+      - run: go test ./...
+      - name: govulncheck (non-blocking)
+        run: |
+          go install golang.org/x/vuln/cmd/govulncheck@latest
+          "$(go env GOPATH)/bin/govulncheck" ./... || true