build(workflows): use the Scalingo actions

Author: EtienneM

.github/CODEOWNERS

@@ -1,2 +1,3 @@
-.github/workflows/* @scalingo/team-ist
+# Dependabot reviewers assignment
 go.sum @scalingo/team-ist
+.github/workflows/* @scalingo/team-ist

.github/workflows/dependabot.yml

@@ -0,0 +1,17 @@
+name: Dependabot auto-approve
+on: pull_request
+
+permissions:
+  # Mandatory for both the auto-merge enabling and approval steps
+  pull-requests: write
+  # Mandatory for the auto-merge enabling step
+  contents: write
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Automatically merge Dependabot PRs
+        uses: Scalingo/actions/dependabot-automerge@main
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -11,34 +11,53 @@
 #
 name: release
 on:
+  pull_request:
   push:
+    branches: [main, master, prod]
     tags:
-      - 'v*'
+      - "v*"
 jobs:
+  linter:
+    name: Linter on a PR
+    if: ${{ github.event_name == 'pull_request' }}
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: Scalingo/actions/go-linter@main
+
+  tests:
+    name: Unit Tests
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: Scalingo/actions/go-tests@main
+
   goreleaser:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    needs: [linter, tests]
     steps:
-      -
-        name: Checkout
+      - name: Checkout
+        if: startsWith(github.ref, 'refs/tags/')
         uses: actions/checkout@v5
-      -
-        name: Unshallow
+      - name: Unshallow
+        if: startsWith(github.ref, 'refs/tags/')
         run: git fetch --prune --unshallow
-      -
-        name: Set up Go
+
+      - name: Set up Go
+        if: startsWith(github.ref, 'refs/tags/')
         uses: actions/setup-go@v6
         with:
-          go-version-file: 'go.mod'
-      -
-        name: Import GPG key
+          go-version-file: "go.mod"
+
+      - name: Import GPG key
+        if: startsWith(github.ref, 'refs/tags/')
         id: import_gpg
         uses: Scalingo/ghaction-import-gpg@v1
         env:
           # These secrets will need to be configured for the repository:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
           PASSPHRASE: ${{ secrets.PASSPHRASE }}
-      -
-        name: Run GoReleaser
+
+      - name: Run GoReleaser
+        if: startsWith(github.ref, 'refs/tags/')
         uses: goreleaser/goreleaser-action@v6
         with:
           version: latest