chore(deps): Bundle dependabot pull requests

[github-actions]

Contains the following PRs:
#675
#674
#673

[Skarlso]

Oh snap. This will require some additional editing...

[Skarlso]

Needs code update if we want to apply this update.

[codecov-commenter]

Codecov Report

Patch and project coverage have no change.

Comparison is base (f6425b0) 56.29% compared to head (5062c1a) 56.29%.

❗ Current head 5062c1a differs from pull request most recent head 1d5e79b. Consider uploading reports for the commit 1d5e79b to get more accurate results

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #678   +/-   ##
=======================================
  Coverage   56.29%   56.29%           
=======================================
  Files          57       57           
  Lines        2780     2780           
=======================================
  Hits         1565     1565           
  Misses       1071     1071           
  Partials      144      144           

Impacted Files	Coverage Δ
infrastructure/containerd/convert.go	51.21% <ø> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

[Skarlso]

Looks okay now. Going to need @Callisto13 and @yitsushi to take a look as well. I'm going to squash the commits once you think this is okay. I had to update a couple of things...

[yitsushi]

Looks good to me, but this PR showed me why I preferred one dependency PR per dependabot alert 😆

[Skarlso]

Looks good to me, but this PR showed me why I preferred one dependency PR per dependabot alert 😆

Absolutely. Though I hope this is the exception and not the norm hahaha.

[yitsushi]

Absolutely. Though I hope this is the exception and not the norm hahaha.

I mean, it's much harder to spot these kind of updates. Like if there are 4-7 package updates in one PR, and one of them may require human intervention.

I don't say remove the bot workflow. It's helpful, but can be painful on project where we have a lot of dependencies and those dependencies have even more dependencies and a security update is available for a package that's used by all of them (including us).

[Skarlso]

For sure. And I agree with you. And I'm really hoping that these kind of things won't happen often... 🤞